Last updated
Last updated
Task 1 - Deploy the machine
Deploy the machine
No answer needed
Task 2 - Compromise the system
Scan the machine, how many ports are open?
2
What service is running on port 22?
ssh
What service is running on port 80?
http
What is the user.txt flag?
THM
What is the root.txt flag?
THM
After that we can browse the admin section which we can see there is a file in the archive section which we can download.
After download extract the tar file into your directory
After that we can navigate to /etc sub directory in the browser
We can see here we have a MD5 hash that we can crack
We will use john the ripper for hash cracking
After john crack the md5 hash we now have a passphrase key which is squidward
As we navigate to the admin shoutbox we can see some keywords like "music_archive"
Then we can extract the backup using borg command and use "squidward" for key
After that we can now see we have a new user in the home directory
After that we can sudo -l see if there is any commands that we can run using sudo
Then use this command to view the root.txt
Or we can use this other way
Go to the file folder of that sudo file
Then include write permission to that command
just add "/bin/bash" at the end and it will move your privilege to root
January 04, 2024
