Wednesday, 20 July 2016

Kioptrix 1

This Kioptrix VM Image are easy challenges. The object of the game is to acquire root access via any means possible (except actually hacking the VM server or player). The purpose of these games are to learn the basic tools and techniques in vulnerability assessment and exploitation. There are more ways then one to successfully complete the challenges.

I have run nmap scanning all ports.

Wow, OpenSSH and Apache are so old. Let's try find suitable exploit for them. BINGO! Openfuck should be suitable for Apache 1.3.20. Ups... It doesn't work...

Surprise... Hmm, we have to looking for suitable exploit further.
We can use Metasploit and trans2open exploit for Samba on our target. When we run the exploit we will get root directly.

Game Over!