Posts: 94
Threads: 3
Joined: Aug 2024
anyone have any clues about Fullhouse? I only got the first flag, This forum account is currently banned. Ban Length: Permanent (N/A Remaining) Ban Reason: Reposting hidden content for free
Posts: 59
Threads: 1
Joined: Jun 2024
(Sep 02, 2024, 03:52 AM)redbaby Wrote: anyone have any clues about Fullhouse? I only got the first flag,
Same here, need to esacalate privs to root maybe. Any hint?
Posts: 20
Threads: 1
Joined: Oct 2023
Sep 10, 2024, 12:28 PM
(This post was last modified: Sep 10, 2024, 12:31 PM by RaidenZX.)
I'm also stuck on the root of the first machine if anyone has just one clue to give me I'll be slightly grateful, but from what it looks like linpeas tells me it might be capability, I'm looking How can I explore this side because it's my first time!
https://book.hacktricks.xyz/linux-harden...pabilities
ps: If so please answer me as I have more or less an idea of how to explore and where
Posts: 59
Threads: 1
Joined: Jun 2024
(Sep 10, 2024, 12:28 PM)RaidenZX Wrote: I'm also stuck on the root of the first machine if anyone has just one clue to give me I'll be slightly grateful, but from what it looks like linpeas tells me it might be capability, I'm looking How can I explore this side because it's my first time!
https://book.hacktricks.xyz/linux-harden...pabilities
ps: If so please answer me as I have more or less an idea of how to explore and where
Will let you know, I'm trying with CVE-2022-0847
Posts: 20
Threads: 1
Joined: Oct 2023
Cool! So anything goes for me!
Posts: 59
Threads: 1
Joined: Jun 2024
(Sep 10, 2024, 01:36 PM)RaidenZX Wrote: Cool! So anything goes for me!
What do you got? The CVE is not exploitable
Posts: 20
Threads: 1
Joined: Oct 2023
Well until then I was exploring the capability... That way
capsh --print
Where I see that there are many things with privileges but you need to use linpeas to know which files have these privileges in the capability
I tried this...
mount /dev/sda /mnt/
cd /mnt
chroot ./ bash
Posts: 3
Threads: 0
Joined: Aug 2024
Anyone got some hints for 4th flag? Is Tensorflow the way to go? The one RCE I found doesn't seem to work.
Posts: 25
Threads: 0
Joined: Jun 2024
(Sep 16, 2024, 10:26 PM)Humidity12Percent Wrote: Anyone got some hints for 4th flag? Is Tensorflow the way to go? The one RCE I found doesn't seem to work.
Apparently we need to write a vulnerable class for Tensorflow. But I haven't managed to do it yet.
Did you find an RCE on this machine? This forum account is currently banned. Ban Length: Permanent (N/A Remaining) Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.
Posts: 59
Threads: 1
Joined: Jun 2024
(Sep 17, 2024, 02:11 PM)dmitry7750 Wrote: (Sep 16, 2024, 10:26 PM)Humidity12Percent Wrote: Anyone got some hints for 4th flag? Is Tensorflow the way to go? The one RCE I found doesn't seem to work.
Apparently we need to write a vulnerable class for Tensorflow. But I haven't managed to do it yet.
Did you find an RCE on this machine?
How did you get the 2nd and 3rd flags? I'm stuck here, need help to move on
|