We scan the host with nmap -A -T4 -p- 192.168.1.6 -vv
As it’s an Android environment we can see that the port 5555 is open for adb, we can connect to it very easily:
If you don’t have adb installed install it with apt install adb.
Now we in we can use “su” to become root and look for the flag:
That’s it, it’s a very easy box to solve in no time.