Pdfy Htb Writeup | Upd
cat /home/robert/user.txt
sudo /usr/bin/pdftex --shell-escape
Result: obtain user shell (user.txt).
$ curl -s 10.10.11.206 <!DOCTYPE html> <html> <head> <title>Pdfy</title> </head> <body> <h1>Pdfy</h1> <p><a href="pdf_file.pdf">Pdf File</a></p> </body> </html>
In this comprehensive writeup, we have covered the PDFY machine on Hack The Box, focusing on its enumeration, exploitation, and privilege escalation. We have demonstrated how to exploit the PDF converter service to gain initial access and then escalate privileges to gain root access. The techniques used in this writeup can be applied to similar machines and scenarios, providing valuable knowledge for cybersecurity enthusiasts. pdfy htb writeup upd
Listener catches shell as www-data .
The exploitation phase involves using the information gathered during enumeration to gain access to the system. cat /home/robert/user
By inspecting the metadata of the generated PDF files (using tools like exiftool or by looking at the PDF's properties), you can identify the backend engine: .
