Official PermX Discussion

HTB Content Machines
192

I am in www-data user, need help

193

hey bro, send DM!

195

Is there any way to upgrade to a full shell out of the php web shell (after file upload)? Executing one command at a time is tedious

196

yeah, via python shell upgrade

199

Better DM for such questions, cause it’s not good to openly discuss the steps of the box

200

Though, as already said in this topic, you don’t need to crack anything.

201

No way, I was trying to crack all the hashes :joy:

203

Why not try the obvious after running Linpeas/manual enumeration?

You have a username and then you have a password… Why not try it in the running services?

Users normally reuse passwords, so many times you will find that a password that works for a service, also works somewhere else :eyes:

2 Likes
204

Yeah, but after latest boxes it felt too easy, you know? :smiley:

205

Generally, I’ve found it’s a better route to assume password re-use than to not. It doesn’t take that long to test that theory either in a lot of cases.

206

Yes - upload a php reverse shell instead. There’s a really well-known one you can find in /usr/share/webshells on Kali (not sure the location on Pwnbox but I assume its the same).

207
208

YAY! :fist:

209

1 - NMAP
2 - VHOST enum
3 - fuzz
4 - search for cve
5 - exploit and get a rev shell

215

I’m still working on priv esc but I don’t think what you’re doing is the right path. As you can see in the error message, you can’t execute your shell script as root as mtz

217

If youre having issues with the script. Dump it into CHATGPT and tell it to explain it to you whats happening.

Then break it down. Ok i need a file to be somewhere but i cant move files to that location. Use your google-fu and figure out how to make files or give access to files from one location to another in linux.

After that you need to figure out a file you want to abuse. IF you can abuse any file on a system what would be your first stop? Somewhere where user creds are stored perhaps?

2 Likes
219

I was talking about this exactly with @T2M5

You’ve mention one possible file. I can think of another that can give you higher privileges, which was how I abused it.

1 Like
224

I feel like an idiot for not getting that faster ■■■■. As soon as I read your comment I understood haha.

1 Like
232

Exactly

234

Those who need help already know where to find me!