Possibly Related Threads…

Atomic2 · 11-18-2023, 11:33 PM

(11-18-2023, 11:14 PM)theart42 Wrote:
(11-18-2023, 10:29 PM)take1312 Wrote: password is

qwe123!@#

gl folks i´m out machine reverting every 10 mins. dam apes

and now we phish

Tried generating rev shell with ghostscript multiple times but it never hits

chillywilly · 11-18-2023, 11:41 PM

(11-18-2023, 11:14 PM)theart42 Wrote:
(11-18-2023, 10:29 PM)take1312 Wrote: password is

qwe123!@#

gl folks i´m out machine reverting every 10 mins. dam apes

and now we phish

caught me a big one and rooted Smile

take1312 · 11-18-2023, 11:48 PM

(11-18-2023, 11:41 PM)chillywilly Wrote:
(11-18-2023, 11:14 PM)theart42 Wrote:
(11-18-2023, 10:29 PM)take1312 Wrote: password is

qwe123!@#

gl folks i´m out machine reverting every 10 mins. dam apes

and now we phish
caught me a big one and rooted

which shell code did you use to inject into the .eps file?
i heared powershell3 base64 decoded? did not try myself since the box is still laggy

Atomic2 · 11-19-2023, 12:06 AM

(11-18-2023, 11:48 PM)take1312 Wrote:
(11-18-2023, 11:41 PM)chillywilly Wrote:
(11-18-2023, 11:14 PM)theart42 Wrote:
(11-18-2023, 10:29 PM)take1312 Wrote: password is

qwe123!@#

gl folks i´m out machine reverting every 10 mins. dam apes

and now we phish
caught me a big one and rooted

which shell code did you use to inject into the .eps file?
i heared powershell3 base64 decoded? did not try myself since the box is still laggy

Using revshells.com powershell3 base64 will work fine

take1312 · 11-19-2023, 12:14 AM

finally rooted.. so many people on it

blade33 · 11-19-2023, 12:29 AM

any hints for root?

take1312 · 11-19-2023, 12:32 AM

(11-19-2023, 12:29 AM)blade33 Wrote: any hints for root?

what do you got so far? when you are user on hospital root is done in 2 minutes

blade33 · 11-19-2023, 12:36 AM

(11-19-2023, 12:32 AM)take1312 Wrote:
(11-19-2023, 12:29 AM)blade33 Wrote: any hints for root?

what do you got so far? when you are user on hospital root is done in 2 minutes

well nothing much, im not really familiar with privesc on windows

take1312 · 11-19-2023, 12:39 AM

(11-19-2023, 12:36 AM)blade33 Wrote:
(11-19-2023, 12:32 AM)take1312 Wrote:
(11-19-2023, 12:29 AM)blade33 Wrote: any hints for root?

what do you got so far? when you are user on hospital root is done in 2 minutes

well nothing much, im not really familiar with privesc on windows

what user are you on which machine

blade33 · 11-19-2023, 12:41 AM

(11-19-2023, 12:39 AM)take1312 Wrote:
(11-19-2023, 12:36 AM)blade33 Wrote:
(11-19-2023, 12:32 AM)take1312 Wrote:
(11-19-2023, 12:29 AM)blade33 Wrote: any hints for root?

what do you got so far? when you are user on hospital root is done in 2 minutes

well nothing much, im not really familiar with privesc on windows

what user are you on which machine

hospital\drbrown on windows

Possibly Related Threads…
Thread		Author	Replies	Views	Last Post
	[FREE] 300+ Writeups PDF HackTheBox/HTB premium retired	Tamarisk	366	113,470	1 hour ago Last Post: llsdd9
	HTB Eloquia User and Root Flags - Insane Box	69646B	14	17,658	08-21-2026, 07:27 PM Last Post: tangol
	[MEGALEAK] HackTheBox ProLabs, Fortress, Endgame - Alchemy, 250 Flags, leak htb-bot	htb-bot	94	26,282	08-21-2026, 06:20 AM Last Post: jamoski
	[FREE] HTB-ProLabs APTLABS Just Flags	kewlsunny	25	19,548	08-15-2026, 06:06 PM Last Post: m4573rx
	HTB - ALL Challenges you Stuck in	osamy7593	3	17,701	08-15-2026, 01:58 AM Last Post: 0xIDA