![]() ![]() Now we can look through the results, and we see that the following commands are being executed on a schedule.įrom here, we’d be able to continue our enumeration of the box armed with knowledge of what commands are being executed on their own. Once you have it, let’s make sure its executable and run it on the system. Download the necessary binary and lets transfer it over to the target machine. Let’s go out to grab the tool from Github. This is where a tool like ps.py comes in handy! It will monitor the system for any commands that get executed and present them to us. ![]() Here, the moderation process is well integrated with django-admin. Read about those requirements it meet in the Features section. It was started as a clone of django-gatekeeper project but to meet certain business requirements. Django-monitor is a django-app to moderate model objects. So we know that cron is being used, but we don’t see anything in the crontab. Moderation seems to be some job each one want to do in their own way. Couldn’t locate anything, but we do see that there is a cron process running after executing the following command. So we have a low-level shell on the box and we’ve done our basic enumeration to try to find a path to escalate privileges. ![]() This post does not intend to serve as a walk-through or write-up of that box, but rather is a using it as an example for some of the tips I’m going to place here. The here-string begins with an ampersand and an opening quotation mark. The basic syntax is to use a variable to hold the resulting here-string. ![]() Here-strings are really finicky (they make Morris the Cat seem like an omnivore). There’s a box on TryHackMe called ConvertMyVideo. Luckily, Windows PowerShell can bring some sanity to this part of the process. While working through TheCyberMentor’s Linux Privesc course, I learned something new and wanted to place this here so I can refer to it later. ![]()
0 Comments
Leave a Reply. |
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |