Attacking Common Services - Attacking SMB

I can’t figure out how to ssh into the target to get the flag

I’ve tried cracking the id_rsa found in the smb share but no luck either

1 Like

I think I just followed the academy instructions: extract hash with John and use rockyou.txt, I don’t remember any issues, can you post how you’re doing it and I’ll check it later.

1 Like

Also post the beginning of the file, if it’s not encrypted you can just chmod 600 it and use it to ssh.

If it’s encrypted there will be info about over above the private key.

1 Like

Thanks for replying friend!

I tried using john to crack the ssh key and let it run for over an hour and a half but no luck

Here is a snapshot of the id_rsa key:

Here is a snapshot of me creating the hash from id_rsa with ssh2john and the outputted hash:

If there’s no text indicating the encryption algorithm then the private key isnt encrypted, no need to crack it, just chmod 600 and ssh -i with it will work

1 Like

If you can wait I’ll check the lab in a few hours and see how I did it. Cheers!!

1 Like

That feeling lol, gg man

1 Like

It worked!!! Thank you soooooooooo much man!!! You’re the best!!!

1 Like

Bro!!! I went to sleep sooo mad because i couldnt figure it out even after like 4 hours of trying lol and you saved me thanks again man words cant express my gratitude!!! Thank you!!!

No worries frustration is part of the game lol

1 Like