Mirai

HTB Content Machines
1

Hey guys,
I made dns association work. I couldnt whitlist domain name , when i tried , it says "Wrong password for domain name not permitted " as response. I couldnt get pass to login admin panel. maybe i am not supposed to work on it. Could someone push me to right direction?

2

you are overthinking this.

3

I tried bf on admin panel to get pass but it doesnt work.

4

What does the admin panel tell you about what you are attacking?

5

i just wanted to test if i can get password via brute force which can give me access to the box via ssh:) but i didnt get success. I am working on it.

6

you need to do some basic enumeration first - whats os, what is it running on this host, what settings are default to this platform.

7

Thank you very much for comments and advice. I did it . as phasmatis said, my mistake was overthinking about this machine. I was supposed to do basic enumeration.

8

I spent yesterday chipping away at Mirai and finally got it in the end, I had so much fun doing it and learnt loads along the way. I’d be happy to help others if needed. :+1:

9

congratulate you andrewh.

10

@yolchuyev Thanks man

11

hey been enumerating Mirai and haven’t been able use any of my findings. Found os, services etc. Also done research on the actual malware but haven’t been able to make any connections. Any suggestions?

12

@ma71as said:
hey been enumerating Mirai and haven’t been able use any of my findings. Found os, services etc. Also done research on the actual malware but haven’t been able to make any connections. Any suggestions?

Default :wink:

13

This was way easy to get in then… I had to scratch my head before the penny dropped for root. Sneaky but good.

14

@ma71as said:
hey been enumerating Mirai and haven’t been able use any of my findings. Found os, services etc. Also done research on the actual malware but haven’t been able to make any connections. Any suggestions?

Try the front door. It just might be open.

15

@Allegiance said:

@ma71as said:
hey been enumerating Mirai and haven’t been able use any of my findings. Found os, services etc. Also done research on the actual malware but haven’t been able to make any connections. Any suggestions?

Try the front door. It just might be open.

Got it a while ago, realised I was missing a really obvious thing about the box.