Post

Sws101_ctf_journal6

Posted Updated
By Dupchu Wangmo 1 min read

Valley

Summary

  • Enumeration website get hidden directory
  • Use creds login ftp –> creds –> user.txt
  • Login SSH, analyse binary file -> creds
  • Change user –> check cronjob –> python import file –> root.txt

Following are the prove for the steps that I followed.

alt text

Scanning

alt text

Web Enumeration

alt text

alt text

we can see that a username and password are left in the file

alt text

alt text

Trying to login to FTP with those creditials.

alt text

Using Wireshark to proceed further.

alt text

we got the user.txt

alt text

SWS101, Journal6
SWS101
This post is licensed under CC BY 4.0 by the author.