CTF-Writeups/CactusCon/Trainer/Trainer.md

# Trainer

## Level 1

<img src="https://imgur.com/fF3lpxZ.png"/>

SSH with the username `level0` and password `level0`

<img src="https://imgur.com/glu07ZX.png"/>

<img src="https://imgur.com/X0b4M4a.png"/>

## Level 2

<img src="https://imgur.com/EDltI1I.png"/>

Switch user to level1 with the password you found

<img src="https://imgur.com/xoDKbpm.png"/>

<img src="https://imgur.com/8uAL1RW.png"/>

`943430e07fd566bc96aa05fca3c96e48`


## Level 3

<img src="https://imgur.com/WhvhCmJ.png"/>

<img src="https://imgur.com/RC6QNQ2.png"/>

<img src="https://imgur.com/B6Micdt.png"/>

`2cadca6148093c403d82396252b8c4db`


## Level 4

<img src="https://imgur.com/vzmZCBg.png"/>

<img src="https://imgur.com/SeKT4hG.png"/>

## Level 5

<img src="https://imgur.com/EALlS5A.png"/>

## Level 6

<img src="https://imgur.com/rMraU2e.png"/>

<img src="https://imgur.com/ylj9h3L.png"/>

## Level 7

<img src="https://imgur.com/O37Uoav.png"/>

<img src="https://imgur.com/LgQeuJK.png"/>

## Level 8

<img src="https://imgur.com/qZmIN1Z.png"/>

<img src="https://imgur.com/HTLmhkC.png"/>

<img src="https://imgur.com/3at5ZpA.png"/>

## Level 9

<img src="https://imgur.com/csKQVuN.png"/>

<img src="https://imgur.com/9Dh26YK.png"/>

<img src="https://imgur.com/2hGVdSD.png"/>

Run strings on the binary

<img src="https://imgur.com/JAH3LBf.png"/>

## Level 10 

<img src="https://imgur.com/YclRxkt.png"/>

<img src="https://imgur.com/qA0FjPi.png"/>

## Level 11

<img src="https://imgur.com/yD7ooh5.png"/>

<img src="https://imgur.com/gep6M8r.png"/>

`192`	

## Level 12

<img src="https://imgur.com/chM9VtH.png"/>

<img src="https://imgur.com/myte7rb.png"/>

<img src="https://imgur.com/EEFzuxF.png"/>

## Level 13

<img src="https://imgur.com/9JYG4Ce.png"/>

<img src="https://imgur.com/yHMot7M.png"/>

We can see `mysecret` has a SUID bit 

<img src="https://imgur.com/GGNjDBn.png"/>

`f4736e1eb28b1d9055c5f5d58a49b5a6`

## Level 14

<img src="https://imgur.com/HxZvZp9.png"/>

<img src="https://imgur.com/5fquULd.png"/>

`0ea027e3835aa87a4a47465321c5fe75`

## Level 15

<img src="https://imgur.com/yjpRf7f.png"/>

<img src="https://imgur.com/mix23OT.png"/>

Since kernel version is `4.19.0-12` password is `4.19`

## Level 16

<img src="https://imgur.com/JnffVro.png"/>

<img src="https://imgur.com/KxH4enG.png"/>

Linux Distro is `Debian` so this will be our password

## Level 17

<img src="https://imgur.com/hHyRII7.png"/>

Aliases are saved in `.bashrc`

<img src="https://imgur.com/P7wtv3l.png"/>

## Level 18

<img src="https://imgur.com/AWrjtxS.png"/>

<img src="https://imgur.com/WB8Ii4C.png"/>

<img src="https://imgur.com/NDIYrR5.png"/>

## Level 19

<img src="https://imgur.com/GovoiPP.png"/>

<img src="https://imgur.com/hJyh4iV.png"/>

<img src="https://imgur.com/ZyPji94.png"/>

## Level 20

<img src="https://imgur.com/kF6Geuk.png"/>

<img src="https://imgur.com/kF6Geuk.png"/>

Here we can see id_rsa key for user `level20`

<img src="https://imgur.com/uRzsz9M.png"/>

## Level 21

<img src="https://imgur.com/p2TfT8w.png"/>

## Level 22

<img src="https://imgur.com/Tkh0vLK.png"/>

<img src="https://imgur.com/VLOYDo0.png"/>