CyberSploit Walkthrough

Scanning the host with nmap -A -T4 -p- 192.168.1.2 -vv

Port 80 is open we scan it with dirb http://192.168.1.2 /usr/share/dirb/wordlist/big.txt

Inside the page source code i found the first clue which is a username itsskv:

The robots file contained a base64 code when decrypting it we get the first flag:

Now we have a username “itsskv” and the password “cybersploit{youtube.com/c/cybersploit}” we use them to login with ssh:

The second flag is:

The second flag is about Binary to ASC:

Now to the privilege escalation part, what i did is transfer the file linux-exploit-suggester.sh to the target and run it, and we got a lot of vulnerabilities and i tried this one and it worked:

There is a link to the exploit download it and run:

gcc 37292.c -o exploit

./exploit

And now you got root and straight to the flag: