{"id":702,"date":"2019-12-14T15:46:15","date_gmt":"2019-12-14T15:46:15","guid":{"rendered":"http:\/\/zerothcode.com\/blog\/?p=702"},"modified":"2019-12-14T15:46:15","modified_gmt":"2019-12-14T15:46:15","slug":"node-1-ctf-walkthrough","status":"publish","type":"post","link":"https:\/\/zerothcode.com\/blog\/node-1-ctf-walkthrough\/","title":{"rendered":"Node 1: CTF Walkthrough"},"content":{"rendered":"

Node 1: CTF Walkthrough<\/h4>\n

In this article, we will learn to solve a Capture the Flag (CTF) challenge which was posted on VulnHub by Rob. According to the information given in the description by the author of the challenge, this CTF is a medium-level boot-to-root challenge in which you need to capture two flags. The first flag needs to be captured as a user and the second flag needs to be captured as a root user.<\/p>\n

You can download the VM for Virtual Box\u00a0here<\/a>. The torrent downloadable URL is also available for this VM, which is given in the reference section at the end of this article. Since the size of the Virtual Machine is more than 1 GB, I would recommend using the torrent for downloading the virtual machine.<\/p>\n

For those who are new to CTF challenges and are not aware of this platform, VulnHub is a well-known website for security researchers which provides users with a method to learn and practice their hacking skills through a series of challenges in a safe and legal environment.<\/p>\n

Please Note:<\/strong>\u00a0For all of these machines, I have used Oracle Virtual Box to run the downloaded machine. I will be using Kali Linux as the attacker machine for solving this CTF. The techniques used are solely for educational purposes only, and I am not responsible if the listed techniques are used against any other targets.<\/p>\n

The Walkthrough<\/h2>\n

After downloading and running this machine in Virtual Box, we started by running the Netdiscover command to obtain the IP Address of the target machine. The command and its output can be seen in the screenshot given below:<\/p>\n

\"\"<\/a><\/p>\n

Command Used: netdiscover<\/p>\n

As shown in the highlighted area in the above screenshot, we have obtained the Virtual Machine IP address, 192.168.1.19 (the target machine IP address). We will be using 192.168.1.11 as the attacker’s IP address.<\/p>\n

Please Note:<\/strong>\u00a0The target and the attacker machine IP address may be different depending on the network configuration.<\/p>\n

So, as we have the target machine IP, the first step is to find the ports and services that are available on the target machine. An Nmap full port scan is used for this purpose. This is illustrated in the screenshot given below.<\/p>\n

\"\"<\/a><\/p>\n

Command Used: nmap 192.168.1.19 -p- -Pn -sV<\/p>\n