# Game Zone

**Task 1: Deploy the vulnerable machine**

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2F7liHTavgcdKcVHiscEl2%2Fimage.png?alt=media&#x26;token=bf6047a9-1045-4d9b-9251-3f35b155c404" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FRWZav4bCVTv2jLhDMPJR%2Fimage.png?alt=media&#x26;token=304ff50c-0bb1-41b6-a9be-c4091c7d7fb1" alt=""><figcaption></figcaption></figure>

**Task 2: Obtain access via SQLi**&#x20;

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FD9ZqmlfMxiGTsLtLMzXs%2Fimage.png?alt=media&#x26;token=3889f35a-7bf2-422f-8a20-c1d017d30574" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FyTRLRs1pi5NJRRHG4Tb7%2Fimage.png?alt=media&#x26;token=760153b8-1f78-4001-90a2-2365d47e3384" alt=""><figcaption></figcaption></figure>

**Task 3: Using SQLMap**

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FYSvm6T2vwQ92MCTLOi41%2Fimage.png?alt=media&#x26;token=9c335255-25f8-4363-b308-3319b7927868" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FB3vqQ1CsbT14ekGq7oaW%2Fimage.png?alt=media&#x26;token=00f3ddd8-4260-4be2-bbdd-6cd623474db9" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2Frn0LmA844UZR0Huva39u%2Fimage.png?alt=media&#x26;token=c004a1b6-adda-4c50-9729-0920a22ae634" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FyVdNc69zwbYVlAR27czz%2Fimage.png?alt=media&#x26;token=bb2638bf-df78-498d-b82c-d0cdaf3bb52e" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FRd0v8DE9xIR0dFoDAc3S%2Fimage.png?alt=media&#x26;token=cd7936a1-66bd-450b-a9b0-9b7a35dd851d" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FN5QoFyFJQICRKoDx8GZI%2Fimage.png?alt=media&#x26;token=051df365-ed41-4d5a-b9ae-cbfb234d7c78" alt=""><figcaption></figcaption></figure>

**Task 4: Cracking a password with JohnTheRipper**

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FZprzJfFkFYdG6I3itG7r%2Fimage.png?alt=media&#x26;token=5bd350ef-2d73-4add-957d-647bd4f5e739" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FZz9QexgUE9kGHN0bp4Vi%2Fimage.png?alt=media&#x26;token=c318ca12-9345-4f92-bc8f-847331a6027b" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FFMfga3HtDL7V79OsCF0c%2Fimage.png?alt=media&#x26;token=59674619-f3ea-4b19-92ad-360c3baa80ed" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FuYXBxGXabYWrHBVqySlS%2Fimage.png?alt=media&#x26;token=bf2561a3-ebf3-4808-8759-069569eb0124" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FiMQFemFRIXYhWA2lU59M%2Fimage.png?alt=media&#x26;token=07359cef-6b57-402e-ba4d-fe3906011968" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FhxtMFan0UdVNe2bsTpD9%2Fimage.png?alt=media&#x26;token=748ed5fe-246a-44bf-918c-739137210991" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FX8mAqaV7lRkRyInhFB3K%2Fimage.png?alt=media&#x26;token=1e60bfaa-1b1e-42fb-8080-b30683cced8f" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FIdjrR0m9a8Oz9c3AS0fY%2Fimage.png?alt=media&#x26;token=6a648d3e-6e3b-408d-a229-8843a3884745" alt=""><figcaption></figcaption></figure>

**Task 5: Exposing services with reverse SSH tunnels**

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FsPrlPJX4TbisPM353RoN%2Fimage.png?alt=media&#x26;token=ae1c50d8-28e8-45ae-863b-1564f6f6faa3" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FauLKA9xHw5aDISbUgoAx%2Fimage.png?alt=media&#x26;token=6717a093-0e0f-435e-ba0a-6015daea5c00" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2Fn4BlwHWPrvez504DZ4gL%2Fimage.png?alt=media&#x26;token=a143ac51-e232-4c5e-bf2a-01fd4bfee438" alt=""><figcaption></figcaption></figure>

```
ssh -L 10000:localhost:10000 agent47 @10.10.220.153
```

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FO8hUlvdWcJhjQkM88egi%2Fimage.png?alt=media&#x26;token=d8dd2d16-e784-4452-9be0-ff8b52dfdbd0" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FUlWPPlzwQmFP2zvvZYDA%2Fimage.png?alt=media&#x26;token=d9951363-98ae-428a-ac4a-e70a37683bab" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FGLIt14FpMV7iklbC9xxE%2Fimage.png?alt=media&#x26;token=09725864-90a7-4ebb-893c-bd783c3a5daf" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FrLr1jhZIbWb6uCxwonaU%2Fimage.png?alt=media&#x26;token=61bc98fe-b564-4231-899e-8013b3f05e96" alt=""><figcaption></figcaption></figure>

**Task 6: Privilege Escalation with Metasploit**

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FrfqJrPLPID9EszR0C31J%2Fimage.png?alt=media&#x26;token=9f67f897-b0d2-4dd6-b7bf-9bb1bc827c93" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2F86CVe7fqjdecLYBUj9Cl%2Fimage.png?alt=media&#x26;token=cde91b5d-5ca1-41c6-9570-7c941410dc2a" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FAyDutXujKFlXfuwgv9XB%2Fimage.png?alt=media&#x26;token=20e0d28b-53d4-4ce6-b698-ad18878cc57a" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2F6RD3b3E42JkSRBHYOnsp%2Fimage.png?alt=media&#x26;token=0338d7b4-403a-4951-b93f-f65d161105c6" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2F3g816HQ4D7sfvbX7Qnbk%2Fimage.png?alt=media&#x26;token=3d2b4d13-8713-41ee-a6b0-52f244b326ad" alt=""><figcaption></figcaption></figure>
