mirror of
https://github.com/AbdullahRizwan101/CTF-Writeups
synced 2025-02-16 12:08:24 +00:00
3.1 KiB
3.1 KiB
Trainer
Level 1
![](https://imgur.com/fF3lpxZ.png)
SSH with the username level0
and password level0
![](https://imgur.com/glu07ZX.png)
![](https://imgur.com/X0b4M4a.png)
Level 2
![](https://imgur.com/EDltI1I.png)
Switch user to level1 with the password you found
![](https://imgur.com/xoDKbpm.png)
![](https://imgur.com/8uAL1RW.png)
943430e07fd566bc96aa05fca3c96e48
Level 3
![](https://imgur.com/WhvhCmJ.png)
![](https://imgur.com/RC6QNQ2.png)
![](https://imgur.com/B6Micdt.png)
2cadca6148093c403d82396252b8c4db
Level 4
![](https://imgur.com/vzmZCBg.png)
![](https://imgur.com/SeKT4hG.png)
Level 5
![](https://imgur.com/EALlS5A.png)
Level 6
![](https://imgur.com/rMraU2e.png)
![](https://imgur.com/ylj9h3L.png)
Level 7
![](https://imgur.com/O37Uoav.png)
![](https://imgur.com/LgQeuJK.png)
Level 8
![](https://imgur.com/qZmIN1Z.png)
![](https://imgur.com/HTLmhkC.png)
![](https://imgur.com/3at5ZpA.png)
Level 9
![](https://imgur.com/csKQVuN.png)
![](https://imgur.com/9Dh26YK.png)
![](https://imgur.com/2hGVdSD.png)
Run strings on the binary
![](https://imgur.com/JAH3LBf.png)
Level 10
![](https://imgur.com/YclRxkt.png)
![](https://imgur.com/qA0FjPi.png)
Level 11
![](https://imgur.com/yD7ooh5.png)
![](https://imgur.com/gep6M8r.png)
192
Level 12
![](https://imgur.com/chM9VtH.png)
![](https://imgur.com/myte7rb.png)
![](https://imgur.com/EEFzuxF.png)
Level 13
![](https://imgur.com/9JYG4Ce.png)
![](https://imgur.com/yHMot7M.png)
We can see mysecret
has a SUID bit
![](https://imgur.com/GGNjDBn.png)
f4736e1eb28b1d9055c5f5d58a49b5a6
Level 14
![](https://imgur.com/HxZvZp9.png)
![](https://imgur.com/5fquULd.png)
0ea027e3835aa87a4a47465321c5fe75
Level 15
![](https://imgur.com/yjpRf7f.png)
![](https://imgur.com/mix23OT.png)
Since kernel version is 4.19.0-12
password is 4.19
Level 16
![](https://imgur.com/JnffVro.png)
![](https://imgur.com/KxH4enG.png)
Linux Distro is Debian
so this will be our password
Level 17
![](https://imgur.com/hHyRII7.png)
Aliases are saved in .bashrc
![](https://imgur.com/P7wtv3l.png)
Level 18
![](https://imgur.com/AWrjtxS.png)
![](https://imgur.com/WB8Ii4C.png)
![](https://imgur.com/NDIYrR5.png)
Level 19
![](https://imgur.com/GovoiPP.png)
![](https://imgur.com/hJyh4iV.png)
![](https://imgur.com/ZyPji94.png)
Level 20
![](https://imgur.com/kF6Geuk.png)
![](https://imgur.com/kF6Geuk.png)
Here we can see id_rsa key for user level20
![](https://imgur.com/uRzsz9M.png)
Level 21
![](https://imgur.com/p2TfT8w.png)
Level 22
![](https://imgur.com/Tkh0vLK.png)
![](https://imgur.com/VLOYDo0.png)