[take1312]

I was just going to paste the actual result of john but let people work it out a bit

would you mind sharing it with me? my NB is old af and cracking takes ages. not have my pc since i´m travveling atm
ah nvm just took 10 minutes

[RebeLHeX]

https://ubuntu.com/security/notices/USN-6018-1

[agoi]

How privesc with apport-cli?

[charlestaylor]

649 | lewis      | lewis    | lewis@devvortex.htb | $2y$10$6V52x.SD8Xc7hNlVwUTrI.ax4BIAYuhVBMVvnYWRceBmy8XdEzm1u |    0 |        1 | 2023-09-25 16:44:24 | 2023-11-25 19:35:07

---

logan@devvortex.htb | $2y$10$IT4k5kmSGvHSO9d6M/1w0eYiB5Ne9XzArQRFJTGThNiy/yBtkIj12
mysql> select * from sd4fg_users;

What User and command syntax did you use to login to mysql

[agoi]

649 | lewis      | lewis    | lewis@devvortex.htb | $2y$10$6V52x.SD8Xc7hNlVwUTrI.ax4BIAYuhVBMVvnYWRceBmy8XdEzm1u |    0 |        1 | 2023-09-25 16:44:24 | 2023-11-25 19:35:07

---

logan@devvortex.htb | $2y$10$IT4k5kmSGvHSO9d6M/1w0eYiB5Ne9XzArQRFJTGThNiy/yBtkIj12
mysql> select * from sd4fg_users;

What User and command syntax did you use to login to mysql

The one that you retrieved in the joomla exploit at the beginning

[RebeLHeX]

did anyone find a POC for this? https://nvd.nist.gov/vuln/detail/CVE-2023-1326

[EDIT] NEVERMIND I got it, is the pager

[take1312]

rooted.. could have been faster haha

---

did anyone find a POC for this? https://nvd.nist.gov/vuln/detail/CVE-2023-1326

posted it already in this tread.
rooted. fun machine

---

did anyone find a POC for this? https://nvd.nist.gov/vuln/detail/CVE-2023-1326

https://github.com/canonical/apport/comm...0364c48ecb

[RebeLHeX]

rooted.. could have been faster haha

---

did anyone find a POC for this? https://nvd.nist.gov/vuln/detail/CVE-2023-1326

posted it already in this tread.
rooted. fun machine

---

did anyone find a POC for this? https://nvd.nist.gov/vuln/detail/CVE-2023-1326

https://github.com/canonical/apport/comm...0364c48ecb

I used this but instead of using a crash report I just added the name of a program the idea is to get into the pager
https://bugs.launchpad.net/ubuntu/+sourc...ug/2016023

[take1312]

rooted.. could have been faster haha

---

did anyone find a POC for this? https://nvd.nist.gov/vuln/detail/CVE-2023-1326

posted it already in this tread.
rooted. fun machine

---

did anyone find a POC for this? https://nvd.nist.gov/vuln/detail/CVE-2023-1326

https://github.com/canonical/apport/comm...0364c48ecb

I used this but instead of using a crash report I just added the name of a program the idea is to get into the pager
https://bugs.launchpad.net/ubuntu/+sourc...ug/2016023

you can also just create an crash via 
sleep 13 &
killall -SIGSEGV sleep

[nenandjabhata]

rooted.. could have been faster haha

---

did anyone find a POC for this? https://nvd.nist.gov/vuln/detail/CVE-2023-1326

posted it already in this tread.
rooted. fun machine

---

did anyone find a POC for this? https://nvd.nist.gov/vuln/detail/CVE-2023-1326

https://github.com/canonical/apport/comm...0364c48ecb

I used this but instead of using a crash report I just added the name of a program the idea is to get into the pager
https://bugs.launchpad.net/ubuntu/+sourc...ug/2016023

Can you tell me How ?