What is "King of the Hill"?

KoTH ~ King of the Hill

• King of the Hill (KoTH) is a competitive hacking game, where you play against up to 5 other hackers to compromise a machine and then patch its vulnerabilities to stop other players from also gaining access.
• The longer you maintain your access, the more points you get.
• Traditionally you are taught how to compromise a machine to claim ownership of it.
• TryHackMe provides plenty of content on how to do so.
• However, an often overlooked aspect of hacking is maintaining access.
• KoTH not only inspires you to apply the knowledge gained from the content within the platform in a competitive, timed set way, but also encourages the use of blue-team tactics to prevent others from using similar methods, such as those that you employed to compromise the machine.

Becoming King

• After enumeration and such forth, you will need to add your TryHackMe Username to /root/king.txt or king file in ADMINISTRATOR user's directory(Windows machine) on the machine itself to become the latest "King".
• It is then down to you to prevent your competitors from replacing your TryHackMe Username and becoming the new "King", however, you must follow the rules.

Be the first to hack into a machine, and then retain your presence by patching vulnerabilities to stop your foes from taking your position!

Attack then defend!

The longer you maintain your access, the more points you get.

How to play

• When everyone "readies" within the lobby, you will be provided the IP Address of the machine you all have to compete amongst each other to attack.
• From now on, you will compete to become the first King of the Hill.
• After the lobby has started - the time of which you have specified, the game will last for 60 minutes or 1 Hour.
• The member with the most points at the end of the game - regardless of the amount of "King Changes" and the like wins!

• Join a lobby with up to 10 players
• When everyone is ready, you'll get a machines IP address
• Enumerate and hack into the machine
• Add your TryHackMe username to /root/king.txt
• Patch the machines vulnerabilities to maintain your access
• The longer you're king, the more points you get
• Hunt for flags around the system for extra points
• After 60 minutes, the game ends

How Points are Scored

• There are two main methods of obtaining points.
• However, it should be noted that any points gained throughout the game are not persistent and will not be reflected on your TryHackMe profile - nor the next lobby you join.
• These two methods are the following:
  • "Be King"
    • The longer you have your TryHackMe Username in the /root/king.txt file, the more points you get.
    • You obtain 10 points every full-minute you are the current "King" I.e.
    • to obtain 10 points, you must be the current "King" for 60 seconds (1 full-minute).
    • If you are only the king for 50 seconds, you will not be awarded the 10 points, nor will the person who was "King" for the remaining 10 seconds of that minute.
  • "Submit Flags"
    • There are multiple entry points to the machine, some will have flags hidden throughout.
    • The difficulty of how the value of the flag is obtained will stipulate the points you obtain for it. I.e.
    • A harder to reach flag will grant more points then a flag that is easier to obtain.

ALL Tools

• CyberChef

  The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

• koth-protect-king

  A script to protect your king in KoTH

• Koth-TryHackMe-Tricks

  Koth TryHackMe - Tricks

• thm-vm:

  TryHackMe - Simple helper script for VPN, VM's, etc

• Hide a Process in Koth Tryhackme
• Python tools for penetration testers
• Pentesting Cheatsheet:
• RustScan

  Lightweight and quick open-source port scanner designed to automatically pipe open ports into Nmap.

• King of The Hill ~ cheatsheets Source

  This is the walkthrough and cheatsheet of Machines on King of the hill on the online hacking platform TryHackme.

Awesome

• Awesome Privilege Escalation
• Awesome Incident Response
• Certified ethical hacker in bullet points