Password Attacks Lab - Medium

Hi, good day, I found the passwords for admin, jason, and dennis
but I don’t know where to find root’s.
What to do now? any hints are greatly appreciated.

Advance thanks!

1 Like

I am stuck on this too, were you ever able to find out how to priv esc ?
The regular things do not work sudo -l, find perm, etc… not working for me I think I might be over thinking this.

What did you use to get the password for d***** ?

1 Like

Found the creds, just need to priv esc.

Can u give a hint what to do after getting J user?

2 Likes

Yeah dude. So once you get onto J**** via ssh. Read to document, and look back at the document you go and had to unzip. Once you read it, think about the my**l cmd you need to get onto the server.

Hopefully this helped you. DM me if you need some more help.

3 Likes

I’m at the same point as you - i’ve got some D creds but can’t see anything useful - looked loads of places it feels. Did you manage to get any further with this?

Whats up Chimp. So read the document, it mentions the service you need to logon to with those creds. Look towards the bottom of the document dude. The cmd for that service is in the “Footprinting” module. DM me if you need more help bro.

Thanks @UDrinkincoffee MVP for this task!

1 Like

Got you dude … Good job to you for not giving up.

1 Like

Hey fellas I’m stuck on the on this lab… I have the document and can see the contents but i don’t know what to do from there. I’ve tried to find files related to the document and tried accessing mysql without success and i don’t know how to access the service mentioned in the document. It seems there’s a hint in the document in accessing the service but it isn’t working for me. What should i be doing?

i figured it out… wasn’t using proper syntax

Hello, May i ask some hint regarding privesc? Thanks.

1 Like

hi 19delta4u, am badly stuck, got two users, d and m, got Docs.zip but have issue either with PKZIP [32/64] that doesn’t get cracked. Could you share your notes,that might help overall? my email is kabbalah3333@gmail.com thank you

1 Like

:pray: thank you

hi man, I got stuck with root esc. please help, thank you!

1 Like

Hi
I get the cred of admin and jason.
But this creds don’t work for ssh. So i don’t know how to use the document files i craked. the ip given in the doc is unreachable from my home machine.
Pls someone can give me a good hint ? :slightly_smiling_face:
Thx all

When copy and pasting syntax be sure you haven’t highlighted extra spaces mistakenly. I spent hours trying to get to the d user because of a stupid syntax error :,(

1 Like

hey man could you dm a slight nudge towards root privesc. i’d appreciate your help.

Hello everyone, my question is for those who finished this lab since I got the flag already.

So I got jason and dennis, and I need to get root. It was hinted already by @pavka that there may be useful files that could be reused in the home folder of one of these users. After seeing this I got the flag. Now, wasn’t that a bit of a wild guess? I know that some “things” can be reused, but after scouring the machine I didn’t find any hint that nudged me in that direction.

Am I supposed to simply reuse everything even when it would be highly unlikely? Or did I miss any hint?

I hope the question is clear enough. Feel free to DM me.

3 Likes

Read the document you found with Jason’s credentials.

Don’t they mention a service?

netstat -antp | grep listen
You will see the listening services with this as well.

1 Like