HTB - Hospital
by take1312 - Saturday November 18, 2023 at 06:51 PM
#21
(Nov 18, 2023, 11:14 PM)theart42 Wrote:
(Nov 18, 2023, 10:29 PM)take1312 Wrote: password is

qwe123!@#

gl folks i´m out machine reverting every 10 mins. dam apes

and now we phish

Tried generating rev shell with ghostscript multiple times but it never hits
Reply
#22
(Nov 18, 2023, 11:14 PM)theart42 Wrote:
(Nov 18, 2023, 10:29 PM)take1312 Wrote: password is

qwe123!@#

gl folks i´m out machine reverting every 10 mins. dam apes

and now we phish
caught me a big one and rooted Smile
Reply
#23
(Nov 18, 2023, 11:41 PM)chillywilly Wrote:
(Nov 18, 2023, 11:14 PM)theart42 Wrote:
(Nov 18, 2023, 10:29 PM)take1312 Wrote: password is

qwe123!@#

gl folks i´m out machine reverting every 10 mins. dam apes

and now we phish
caught me a big one and rooted Smile

which shell code did you use to inject into the .eps file? 
i heared powershell3 base64 decoded? did not try myself since the box is still laggy
Reply
#24
(Nov 18, 2023, 11:48 PM)take1312 Wrote:
(Nov 18, 2023, 11:41 PM)chillywilly Wrote:
(Nov 18, 2023, 11:14 PM)theart42 Wrote:
(Nov 18, 2023, 10:29 PM)take1312 Wrote: password is

qwe123!@#

gl folks i´m out machine reverting every 10 mins. dam apes

and now we phish
caught me a big one and rooted Smile

which shell code did you use to inject into the .eps file? 
i heared powershell3 base64 decoded? did not try myself since the box is still laggy

Using revshells.com powershell3 base64 will work fine
Reply
#25
finally rooted.. so many people on it
Reply
#26
any hints for root?
Reply
#27
(Nov 19, 2023, 12:29 AM)blade33 Wrote: any hints for root?

what do you got so far? when you are user on hospital root is done in 2 minutes
Reply
#28
(Nov 19, 2023, 12:32 AM)take1312 Wrote:
(Nov 19, 2023, 12:29 AM)blade33 Wrote: any hints for root?

what do you got so far? when you are user on hospital root is done in 2 minutes

well nothing much, im not really familiar with privesc on windows
Reply
#29
(Nov 19, 2023, 12:36 AM)blade33 Wrote:
(Nov 19, 2023, 12:32 AM)take1312 Wrote:
(Nov 19, 2023, 12:29 AM)blade33 Wrote: any hints for root?

what do you got so far? when you are user on hospital root is done in 2 minutes

well nothing much, im not really familiar with privesc on windows

what user are you on which machine
Reply
#30
(Nov 19, 2023, 12:39 AM)take1312 Wrote:
(Nov 19, 2023, 12:36 AM)blade33 Wrote:
(Nov 19, 2023, 12:32 AM)take1312 Wrote:
(Nov 19, 2023, 12:29 AM)blade33 Wrote: any hints for root?

what do you got so far? when you are user on hospital root is done in 2 minutes

well nothing much, im not really familiar with privesc on windows

what user are you on which machine

hospital\drbrown on windows
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  [FREE] CPTS 12 FLAGS pulsebreaker 87 3,261 1 hour ago
Last Post: darth_sidious
  [FREE] HackTheBox Academy - CBBH CDSA CPTS All Modules Flags Techtom 48 3,775 1 hour ago
Last Post: darth_sidious
  [MEGALEAK] HackTheBox ProLabs, Fortress, Endgame - Alchemy, 250 Flags, leak htb-bot htb-bot 98 9,091 Yesterday, 08:05 PM
Last Post: Zacker90
  SVCHOST Injector 2026 opsecmaster67 0 103 Yesterday, 01:41 PM
Last Post: opsecmaster67
  Cold Seal 5.6 cracked Sensitive information can be exposed or stolen opsecmaster67 0 86 Yesterday, 01:38 PM
Last Post: opsecmaster67

Forum Jump:


 Users browsing this forum: 1 Guest(s)