HackTheBox - Clicker

[@olivierlasne2346]

If I remembrer correctly (I did this box a few weeks back), the reason why you can't read the file at 41:00 is that the buffer for the command is fairly small. So the path your are giving is trunckated which result in an error. It works for /etc/passwd and ./ssh/id_rsa because the full path are small enough for this vuln.

[@tntxqx8281]

nice upload ippsec we love ya

[@StevenHokins]

Very good video, thank you ❤

[@peterarnell8112]

That’s awesome, I bypassed the role filter by using &/**/role=Admin

[@george___43]

Love these videos!!

[@Cd6A0B]

I missed the filter bypass! I though I could just change the admin's password in save game since it allows you to modify any field in players but that didn't work.

[@Agr0dan]

Can you go into more detail about what you meant regarding private temp in systemd at 39:41?

[@ippsec]

Services ran under systemd have a jailed temp folder generally. So Apache’s /tmp/ is different from MySQL’s /tmp/

[@r34per_1]

What do you use for screen recording?

[@monKeman495]

role param is useless for normal user i'm curious is it passes as intended param when admin authenticates

[@ezekieljills]

love youuu

[@AUBCodeII]

You should've picked Mercy, Ipp

[@tiburon239]

🎉🎉🎉

[@black53342]

Is this OSCP level?

[@GuitarAngelTheFirst]

Not quite, this is easier than some of the mediums currently active this season which I would say are OSCP level

[@tg7943]

Push!

[@alanisam6220]

First

[@Ivo--]

I got root in a third way, with PERL5OPT and PERL5DB. You put -d in OPT and with DB you can then run arbitrary perl code.

[@AUBCodeII]

This is what happens when you don't use the line unsetenv("LD_PRELOAD");:
bash: syntax error near unexpected token `)'
root@clicker:/tmp# pwd
/tmp
root@clicker:/tmp# free -h
bash: fork: retry: Resource temporarily unavailable
bash: fork: retry: Resource temporarily unavailable
bash: fork: retry: Resource temporarily unavailable
bash: fork: retry: Resource temporarily unavailable
bash: fork: Resource temporarily unavailable
root@clicker:/tmp#
root@clicker:/tmp# free -h
bash: fork: retry: Resource temporarily unavailable
bash: fork: retry: Resource temporarily unavailable