Scanning the host with “nmap -A -T4 192.168.1.8 -vv”

Only on port is open 6667 for UnrealIRCd connecting to that port with “nc 192.168.1.8 6777 came with nothing, so i searched for IRC on SearchSploit came to this:

So I decided to use Metasploit and search for UnrealIRCd:


And we got a connection back and running “id” we can see we are “server”.
Scaping the shell jail with “python3 -c ‘import pty; pty.spawn(“/bin/bash”)’ “
Went to home folder and searched for a while but nothing important so I said let’s check for root privilege with “su” and see what will happen:

Just like that, we got root and the proof too!!!