Personal WebsiteGithubLinkedIn

Wgel CTF

LogoWgel CTFTryHackMe

Task 1: Wgel CTF

Question

User flag

  • Let's scan the target using nmap.

  • There are two open ports:

22

ssh

80

http

  • Let's check the /index.html page.

  • We can view the page source using CTRL+U.

  • Let's scan all the directories using gobuster.

  • We can visit the /sitemap page using our browser.

  • The webpage made my browser crash as soon as I visited it.

  • We can search one layer deeper.

  • We can now visit /sitemap/.ssh using our browser.

  • Let's download the id_rsa file using wget.

  • Let's change the permissions on the id_rsa file.

  • Now we can login as jessie.

  • Let's read the user flag.

Answer

Root flag

  • Let's check the sudo permissions jessie has.

  • So we can post a file to our machine as jessie without using a password.

  • Let's find the file the we need to post.

  • Let's start a listener using nc.

  • Let's send the file now.

  • We can go back to check the listener.

Answer

Last updated

Was this helpful?