@evilcall said:
Hi everyone
I need help, I am user and I don’t know what I have to do to get Administrator privileges . Some hints will be appreciated.
A reverse shell was the only way I was able to get into the box with enough stability to read root.txt:
Guys, I am really confused about this one here. I got user, tried just about everything in the book to privesc, but nothing seems to work. I’ve been all over the r***s command, which doesn’t return any data, even the help switch gives me blank lines. Can’t get a reverse shell cause nothing will execute. I’m probably missing something stupid, but I can’t rule out some obscure misconfiguration. Would appreciate a PM; my discord is sceleris#5490
rooted!!! pm if u want some help
i will give u some hint without spoilers
for the entry u must get some file and get important infos
and for the root just enum the system and u get intereting thing jut know how to use it
the response is front of u
Working on privesc. Found interesting sc***ts, and vulnerable version of program (but permissions are patched). Checked all bin_paths, all services… I’m Stuck, can anyone get a hing in PM?
i’ve managed to get the root flag copied into another file by using ru*** and a quick script, but i can’t read file that either or change its permissions.
@iainpbsec said:
i’ve managed to get the root flag copied into another file by using ru*** and a quick script, but i can’t read file that either or change its permissions.
Copying it might not be the best approach.
There are other things you can to do pipe the contents of one file into a new file, and this will make sure the second file is accessible by the account you’ve used.
how did you get the administrator password?
net users stat password required = no
but it does not take blank password when doing the r***s
I tried the passwords found in the mdb table but they do not work, I also tried the password in the pst also did not work