Noontide Walkthrough

Scanning the host with “nmap -A -T4 -vv”

Only on port is open 6667 for UnrealIRCd connecting to that port with “nc 6777 came with nothing, so i searched for IRC on SearchSploit came to this:

So I decided to use Metasploit and search for UnrealIRCd:

And we got a connection back and running “id” we can see we are “server”.

Scaping the shell jail with “python3 -c ‘import pty; pty.spawn(“/bin/bash”)’ “

Went to home folder and searched for a while but nothing important so I said let’s check for root privilege with “su” and see what will happen:

Just like that, we got root and the proof too!!!

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s