Talkative machine discussion
by - Thursday, January 1, 1970 at 12:00 AM
(April 14, 2022, 12:05 AM)Internetdreams Wrote:
(April 13, 2022, 06:44 AM)inferno7us Wrote: thanks for the hint..


For root access, i know we need to takeover account on Rocket Chat but i cannot takeover the account..

any advise?


no sqli on user.lists?query


also you can access the mongodb through saul


how did you do it?
Reply
(April 14, 2022, 08:17 AM)br_7801 Wrote:
(April 14, 2022, 12:05 AM)Internetdreams Wrote:
(April 13, 2022, 06:44 AM)inferno7us Wrote: thanks for the hint..


For root access, i know we need to takeover account on Rocket Chat but i cannot takeover the account..

any advise?


no sqli on user.lists?query


also you can access the mongodb through saul


how did you do it?


do what?

if ssh, you need to do it locally..

if databse, port forwarding


anyone can help with the root part?
Reply
rooted!
Reply
(April 14, 2022, 11:42 AM)inferno7us Wrote: rooted!


Congrats mate. Could you please share the hash root? Thank you very much.
Reply
how to ssh with saul??? i spawn shell with www-data user privilage ...

i previous trying with pivoting and with -T option for Pseudo-terminal stdin problem ... obviously i tried with my host port 22 seems filtered !!

Any hint or tips for the user flag?
Reply
(April 14, 2022, 07:33 PM)cavour12 Wrote: how to ssh with saul??? i spawn shell with www-data user privilage ...

i previous trying with pivoting and with -T option for Pseudo-terminal stdin problem ... obviously i tried with my host port 22 seems filtered !!

Any hint or tips for the user flag?


When you have the shell with www-data after modifiying the template connect as usual to ssh from the www-data shell to 10.10.11.155
Reply
(April 14, 2022, 07:33 PM)cavour12 Wrote: how to ssh with saul??? i spawn shell with www-data user privilage ...

i previous trying with pivoting and with -T option for Pseudo-terminal stdin problem ... obviously i tried with my host port 22 seems filtered !!

Any hint or tips for the user flag?


upgrade to tty.
script -qc /bin/bash /dev/null
Reply
(April 14, 2022, 01:37 PM)NoobHTB Wrote:
(April 14, 2022, 11:42 AM)inferno7us Wrote: rooted!


Congrats mate. Could you please share the hash root? Thank you very much.


how to get a hash root?
Reply
(April 14, 2022, 11:08 PM)inferno7us Wrote:
(April 14, 2022, 01:37 PM)NoobHTB Wrote:
(April 14, 2022, 11:42 AM)inferno7us Wrote: rooted!


Congrats mate. Could you please share the hash root? Thank you very much.


how to get a hash root?

I think cat /etc/shadow. Thanks.
Reply
Any help with root? :(
Reply


 Users viewing this thread: Talkative machine discussion: No users currently viewing.