HTB - Hospital
by take1312 - Saturday November 18, 2023 at 06:51 PM
RaidForums
Member
Posts: 2
Threads: 0
Joined: Sep 2023
Reputation: 0

#21
11-18-2023, 11:33 PM
(11-18-2023, 11:14 PM)theart42 Wrote:
(11-18-2023, 10:29 PM)take1312 Wrote: password is

qwe123!@#

gl folks i´m out machine reverting every 10 mins. dam apes

and now we phish

Tried generating rev shell with ghostscript multiple times but it never hits
Reply
Elite User

Posts: 119
Threads: 13
Joined: Sep 2023
Reputation: 30

#22
11-18-2023, 11:41 PM
(11-18-2023, 11:14 PM)theart42 Wrote:
(11-18-2023, 10:29 PM)take1312 Wrote: password is

qwe123!@#

gl folks i´m out machine reverting every 10 mins. dam apes

and now we phish
caught me a big one and rooted Smile
Reply
MVP User
MVP
Posts: 52
Threads: 4
Joined: Sep 2023
Reputation: 20

#23
11-18-2023, 11:48 PM
(11-18-2023, 11:41 PM)chillywilly Wrote:
(11-18-2023, 11:14 PM)theart42 Wrote:
(11-18-2023, 10:29 PM)take1312 Wrote: password is

qwe123!@#

gl folks i´m out machine reverting every 10 mins. dam apes

and now we phish
caught me a big one and rooted Smile

which shell code did you use to inject into the .eps file? 
i heared powershell3 base64 decoded? did not try myself since the box is still laggy
Reply
RaidForums
Member
Posts: 2
Threads: 0
Joined: Sep 2023
Reputation: 0

#24
11-19-2023, 12:06 AM
(11-18-2023, 11:48 PM)take1312 Wrote:
(11-18-2023, 11:41 PM)chillywilly Wrote:
(11-18-2023, 11:14 PM)theart42 Wrote:
(11-18-2023, 10:29 PM)take1312 Wrote: password is

qwe123!@#

gl folks i´m out machine reverting every 10 mins. dam apes

and now we phish
caught me a big one and rooted Smile

which shell code did you use to inject into the .eps file? 
i heared powershell3 base64 decoded? did not try myself since the box is still laggy

Using revshells.com powershell3 base64 will work fine
Reply
MVP User
MVP
Posts: 52
Threads: 4
Joined: Sep 2023
Reputation: 20

#25
11-19-2023, 12:14 AM
finally rooted.. so many people on it
Reply
RaidForums
Member
Posts: 28
Threads: 2
Joined: Sep 2023
Reputation: 0

#26
11-19-2023, 12:29 AM
any hints for root?
Reply
MVP User
MVP
Posts: 52
Threads: 4
Joined: Sep 2023
Reputation: 20

#27
11-19-2023, 12:32 AM
(11-19-2023, 12:29 AM)blade33 Wrote: any hints for root?

what do you got so far? when you are user on hospital root is done in 2 minutes
Reply
RaidForums
Member
Posts: 28
Threads: 2
Joined: Sep 2023
Reputation: 0

#28
11-19-2023, 12:36 AM
(11-19-2023, 12:32 AM)take1312 Wrote:
(11-19-2023, 12:29 AM)blade33 Wrote: any hints for root?

what do you got so far? when you are user on hospital root is done in 2 minutes

well nothing much, im not really familiar with privesc on windows
Reply
MVP User
MVP
Posts: 52
Threads: 4
Joined: Sep 2023
Reputation: 20

#29
11-19-2023, 12:39 AM
(11-19-2023, 12:36 AM)blade33 Wrote:
(11-19-2023, 12:32 AM)take1312 Wrote:
(11-19-2023, 12:29 AM)blade33 Wrote: any hints for root?

what do you got so far? when you are user on hospital root is done in 2 minutes

well nothing much, im not really familiar with privesc on windows

what user are you on which machine
Reply
RaidForums
Member
Posts: 28
Threads: 2
Joined: Sep 2023
Reputation: 0

#30
11-19-2023, 12:41 AM
(11-19-2023, 12:39 AM)take1312 Wrote:
(11-19-2023, 12:36 AM)blade33 Wrote:
(11-19-2023, 12:32 AM)take1312 Wrote:
(11-19-2023, 12:29 AM)blade33 Wrote: any hints for root?

what do you got so far? when you are user on hospital root is done in 2 minutes

well nothing much, im not really familiar with privesc on windows

what user are you on which machine

hospital\drbrown on windows
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  [FREE] 300+ Writeups PDF HackTheBox/HTB premium retired Tamarisk 360 88,710 03-28-2026, 09:28 AM
Last Post: catsweet
  [FREE] HTB-ProLabs APTLABS Just Flags kewlsunny 23 2,348 03-28-2026, 03:30 AM
Last Post: lulaladrow
  [MEGALEAK] HackTheBox ProLabs, Fortress, Endgame - Alchemy, 250 Flags, leak htb-bot htb-bot 87 7,490 03-27-2026, 07:22 PM
Last Post: stn
  HTB Eloquia User and Root Flags - Insane Box 69646B 13 350 03-27-2026, 06:14 PM
Last Post: vlxw
  HTB - ALL Challenges you Stuck in osamy7593 2 646 03-27-2026, 04:24 PM
Last Post: catsweet



 Users browsing this thread: 1 Guest(s)