Meow (Tier 0)
Description
Tier -> 0
Difficult -> Very Easy
OS -> Linux
Tags -> Telnet / Protocols / Reconnaissance / Weak Credentials / Misconfiguration
Write-up
With a little research, I started answering the first questions
Answer: Virtual Machine
Answer: Terminal
Answer: openvpn
Answer: ping
Answer: nmap
Then I continued doing an initial port scan of the machine using Nmap
nmap 10.129.54.192 -p- -Pn --min-rate 2000
With this, I answered the next question
Answer: telnet
Then I did an exhaustive scan to get information on the services running on the found ports
nmap 10.129.54.192 -p23 -sVC
I found a port running the Telnet protocol, so I tried to connect through this protocol using common credentials. When using root as username to log in, fortunately, gained access without being asked for a password
telnet 10.129.54.192
To learn more about the Telnet protocol, you can go here
With this, I answered the next question
Answer: root
Once inside, I checked the files in the folder I was in and found a flag.txt file, that when reading its content gave me the root flag
With this, I got the root flag and pwned the machine
Answer: b40abdfe23665f766f9c61ecba8a4c19
Last updated