SQLMap Essentials- OS Exploitation

HTB Content Academy
1

Hello,

I’m working on the last flag of the OS Exploitation stage within SQLMap Essentials, but I’m stuck at the OS Shell for some reason. I get the first flag no problem, then when I get the OS Shell, I cannot change directories or even run things like “sudo -l” since I get “sudo not found”. Curious what I may be missing here, but I don’t know what I could be missing if I can’t even change directories.

2

hello

try this command
find /flag*
when in the os shell

let me know if that helps

3

Yes, this worked just fine. Can you explain where that command came from? I don’t see that in the sqlmap help guide, and I don’t understand why the standard *nix CLI commands didn’t work in this case. Can you direct me to anything that helps me understand the sqlmap OS commands better?

Thanks for the help on that.

4

allot of outside research. HTB shows you the basics but they dont teach you everything.
I recommend searching the topic you are doing on HTB and you should find other resources online.

1 Like
5

hi could only find 1 shell which is the same shell in /var/html/www.
could not find any other flag.txt.
any help?

1 Like