[ThreeCleaves]

I cracked the password and i cant login with it on the login page with username as admin, I even tried the email I have found. Can someone help?

http://greenhorn.htb/login.php

[zivziv]

root password hint: remove the spaces

---

is the password the full long one for root? it doesnt work (unblurred)

What image of depix did you use to get it to unblurr? And did you take a screenshot on the whole pdf or only the password section?

you can obtain the image just by dragging the password image to the terminal, it should write the actual path to the page, something like this

/tmp/atril-1203593/image.78KDR2.png

did that
I did get a readable long string, it just doesnt work

[ThreeCleaves]

After executing 51592.py its telling file not found what is the error what we have to edit in 51592.py help me!!!

You need to modify the exploit with the correct password and url's.

[creeman]

After executing 51592.py its telling file not found what is the error what we have to edit in 51592.py help me!!!

You need to modify the exploit with the correct password and url's.

---

Can you give the modified urls, i cant understand

[ThreeCleaves]

After executing 51592.py its telling file not found what is the error what we have to edit in 51592.py help me!!!

You need to modify the exploit with the correct password and url's.

---

Can you give the modified urls, i cant understand

login_url = "http://greenhorn.htb/login.php"
upload_url = "http://greenhorn.htb/admin.php?action=installmodule"
rce_url="http://greenhorn.htb/data/modules/mirabbas/miri.php"

[creeman]

Can anyone tell me the root pasword??

[Tsirko]

I get

Login account
ZIP file download.
Not found. 

When i run the exploit. And yes I change the rce_url="http://greenhorn.htb/data/modules/mirabbas/miri.php"
mirabbas = name of zip
miri.php = name of file

[ThreeCleaves]

Can anyone tell me the root pasword??

If your having issues with Depix, try extracting the image with pdfimage from poppler-utils.

I was having an issue with my source image. Once I extracted it with pdfimage i was able to unblur the image.

[Kurovoid]

Can anyone tell me the root pasword??

If your having issues with Depix, try extracting the image with pdfimage from poppler-utils.

I was having an issue with my source image. Once I extracted it with pdfimage i was able to unblur the image.

This way it worked for me. Thank you. I just hated the last part of this machine

[Tsirko]

if there are spaces in your root password remove them

May i ask when i run the exploit i get 
Login account
ZIP file download.
Not found.

My zip file correcly named gets upladed but it cant find the file in the modules to run the reverse shell...