[HTB] Starting Point: Meow

Chris Kim·2024년 11월 9일

Hack The box

목록 보기
1/10
post-thumbnail

1. Task

Task1
Q: What does the acronym VM stand for?

A: Virtual Machine

Taks2
Q: What tool do we use to interact with the operating system in order to issue commands via the command line, such as the one to start our VPN connection? It's also known as a console or shell.

A: Terminal

Task3
Q: What service do we use to form our VPN connection into HTB labs?

A: openvpn

Task4
Q: What tool do we use to test our connection to the target with an ICMP echo request?

A: ping

Task5
Q: What is the name of the most common tool for finding open ports on a target?

A: nmap

Task6
Q: What service do we identify on port 23/tcp during our scans?

A: telnet

Task7
Q: What username is able to log into the target over telnet with a blank password

A: root
(Usually, 'admin', 'adminstraotor', 'root' are subject to enumeration)

Task8
Q: Submit root flag

A: After logging in, I found flag.txt. ls, cat are helpful.

2. More

2.1 Virtual Machine

A Virtual Machine is a compute resource that uses software instead of a physical computer to run programs and deploy apps.

2.2 ping, ICMP

'ping' stands for 'Packet Internet Groper'. 'ping' is a command to diagnose nerwork's state.
You can use ping <IP> <option>

'ICMP' stands for 'Internat Control Message Protocol'. In TCP/IP, this protocol report problem, occured when processing IP packet.(mainly whether the packet arrived normally)

2.3 VPN: Openvpn

'VPN' stands for 'Virtual Private Network'

Usually, I used VPN to bypass accessing restriction. A personal VPN encrypts a device's internet connection and routes it to a server in a location user choosed.

But, VPN can be used for other purpose. VPN also allows us to access the company's internal network remotely.

Openvpn is a VPN system tha implements techniques to create secure point-to-point or site-to-site connection in routed or bridged configurations and remote access facilities.(WIKIPEDIA)

2.4 telnet

Telnet(short for "telecommunications network") is a client/server application protocol that provides access to virtual terminals of remote system on local area nerworks or the Internet(WIKIPEDIA)

2.5 nmap

By using nmap, We can scan server's ports opened. There are a lot options we can use.
Through nmap -sV -sC <target IP>, we can scan target's port, services and other informations. -sC means 'run nmap's scripts that is included in default option'. -sV shows what service is provided through opened port.

profile
회계+IT=???

0개의 댓글