Posts

Showing posts from February, 2022

HackMyVM - Hotel

Image
  Another nice machine from sML, Its classed as easy but it does have its challenges. It contains a really satisfying user escalation that is just beautiful, getting the root flag isn't too difficult but I found it a bit more of a challenge to actually get root. Find It ┌──( kali㉿kali )-[ ~/hotel ] └─ $ sudo netdiscover -r 10.0.0.0/24 -P | tee findit [sudo] password for kali:     _____________________________________________________________________________    IP             At MAC Address     Count     Len   MAC Vendor / Hostname         -----------------------------------------------------------------------------   10.0.0.1         08:00:27:fe:f1:51       1       60   PCS Systemtechnik GmbH   10.0.0.38       08:00:27:cd:b0:5d       1       60   PCS Systemtechnik GmbH -- Active scan completed, 2 Hosts found.                                                                                                                 Scan it                                                  

HackMyVM - Messages

Image
  Messages is a medium difficulty machine that should make you think a little... As it is a medium machine I will assume a little knowldge and just mention the relevant points rather than detail the simple bits. Find it ┌──( kali㉿kali )-[ ~/messages ] └─ $ sudo netdiscover -r 10.0.0.0/24 -P | tee findit [sudo] password for kali:     _____________________________________________________________________________    IP             At MAC Address     Count     Len   MAC Vendor / Hostname         -----------------------------------------------------------------------------   10.0.0.1         08:00:27:d5:3a:9b       1       60   PCS Systemtechnik GmbH   10.0.0.136       08:00:27:b9:c9:3f       1       60   PCS Systemtechnik GmbH -- Active scan completed, 2 Hosts found. Scan it └─ $ nmap -T4 -p- -sC -sV -oN nmap.out 10.0.0.136 Starting Nmap 7.91 ( https://nmap.org ) at 2022-02-14 11:50 EST Nmap scan report for 10.0.0.136 Host is up (0.00063s latency). Not shown: 65525 filtered por