HTB_Meow - meruneru/tech_memo GitHub Wiki
イントロのマシン
#telnet が空いていることがわかった
└──╼ $nmap -sV 10.129.185.217
Starting Nmap 7.91 ( https://nmap.org ) at 2021-11-11 12:32 UTC
Nmap scan report for 10.129.185.217
Host is up (0.18s latency).
Not shown: 980 closed ports
PORT STATE SERVICE VERSION
23/tcp open telnet Linux telnetd
79/tcp filtered finger
280/tcp filtered http-mgmt
543/tcp filtered klogin
765/tcp filtered webster
1042/tcp filtered afrog
1097/tcp filtered sunclustermgr
1183/tcp filtered llsurfup-http
1688/tcp filtered nsjtp-data
2008/tcp filtered conf
2046/tcp filtered sdfunc
3737/tcp filtered xpanel
3851/tcp filtered spectraport
4446/tcp filtered n1-fwp
5962/tcp filtered unknown
7201/tcp filtered dlip
7778/tcp filtered interwise
9080/tcp filtered glrpc
10001/tcp filtered scp-config
49175/tcp filtered unknown
IDはrootで入れた。flag.txtはホームディレクトリにあって、 root権限なのでそのまま取れた。
Meow login: root
Welcome to Ubuntu 20.04.2 LTS (GNU/Linux 5.4.0-77-generic x86_64)
* Documentation: https://help.ubuntu.com
* Management: https://landscape.canonical.com
* Support: https://ubuntu.com/advantage
System information as of Thu 11 Nov 2021 12:45:23 PM UTC
System load: 0.0 Processes: 139
Usage of /: 41.7% of 7.75GB Users logged in: 0
Memory usage: 4% IPv4 address for eth0: 10.129.185.217
Swap usage: 0%
75 updates can be applied immediately.
31 of these updates are standard security updates.
To see these additional updates run: apt list --upgradable
The list of available updates is more than a week old.
To check for new updates run: sudo apt update
Last login: Mon Sep 6 15:15:23 UTC 2021 from 10.10.14.18 on pts/0
root@Meow:~# ls
flag.txt snap
root@Meow:~#
root@Meow:~# cat flag.txt
b40abdfe23665f766f9c61ecba8a4c19