Meow (Tier 0)

Description

• Tier -> 0

• Difficult -> Very Easy

• OS -> Linux

• Tags -> Telnet / Protocols / Reconnaissance / Weak Credentials / Misconfiguration

https://app.hackthebox.com/starting-point?tier=0

Write-up

• With a little research, I started answering the first questions

Answer: Virtual Machine

---

Answer: Terminal

---

Answer: openvpn

---

Answer: ping

---

Answer: nmap

---

• Then I continued doing an initial port scan of the machine using Nmap

nmap 10.129.54.192 -p- -Pn --min-rate 2000

---

• With this, I answered the next question

Answer: telnet

---

• Then I did an exhaustive scan to get information on the services running on the found ports

nmap 10.129.54.192 -p23 -sVC

---

• I found a port running the Telnet protocol, so I tried to connect through this protocol using common credentials. When using root as username to log in, fortunately, gained access without being asked for a password

telnet 10.129.54.192

To learn more about the Telnet protocol, you can go here

---

• With this, I answered the next question

Answer: root

---

• Once inside, I checked the files in the folder I was in and found a flag.txt file, that when reading its content gave me the root flag

---

• With this, I got the root flag and pwned the machine

Answer: b40abdfe23665f766f9c61ecba8a4c19