[HTB] Starting Point: Explosion

Chris Kim·2024년 11월 13일

Hack The box

목록 보기
5/10
post-thumbnail

1. Task

Task1
Q: What does the 3-letter acronym RDP stand for?
A: Remote Desktop Protocol

Task2
Q: What is a 3-letter acronym that refers to interaction with the host through a command line interface?
A: cli(command line interface)

Task3
Q: What about graphical user interface interactions?
A: gui

Task4
Q: What is the name of an old remote access tool that came without encryption by default and listens on TCP port 23?
A: telnet

Task5
Q: What is the name of the service running on port 3389 TCP?
A: ms-wbt-server

Task6
Q: What is the switch used to specify the target host's IP address when using xfreerdp?
A: /v:

Task7
Q: What username successfully returns a desktop projection to us with a blank password?
A: Administrator

sudo apt-get install freerdp2-x11
xfreerdp /v:10.129.168.84 /u:administrator /cert-ignore

If you don't put /cert-ignore, then you can not access server because of certificate verification failure.

2. More

2.1 CLI - Remote Access Tools

Telnet is a rudimentary example of CLI. Telnet runs on port 23 TCP, and SSH which is more secure counterpart of telnet runs on port 22 TCP.
SSH stnads for Secure Shell Protocol. This adds layers of authentication and encryption. SSH uses public-key cryptography.

2.2 GUI - Remote Access Tools

TeamViewer is not pre-installed on operating system. But Microsoft Remote Desktop Connections is intergrated with OS. So this software can be misconfigured. Misconfiguration results in errors.

In our case, Administrator has no password. So I gained access so easily without hard effort.

profile
회계+IT=???

0개의 댓글