Skip to content

Latest commit

 

History

History
65 lines (55 loc) · 1.85 KB

15.Setting_up_Labs.md

File metadata and controls

65 lines (55 loc) · 1.85 KB
Raw

Installing Protostar

Getting Protostar https://exploit.education/protostar/

Install via VirtualBox like Nebula

Installing Qemu and Setting up Phoenix

What is Phoexnix? 9 64 bits

https://exploit.education/phoenix/

Download qcow2 Image

https://github.com/ExploitEducation/Phoenix/releases/download/v1.0.0-alpha-3/exploit-education-phoenix-amd64-v1.0.0-alpha-3.tar.xz

Download Qemu for Windows https://www.qemu.org/download/#windows

Qemu Windows [ Ref ]

#boot-phoenix1
\Program` Files\qemu\qemu-system-x86_64.exe `
    -kernel vmlinuz-4.9.0-8-amd64 `
    -initrd initrd.img-4.9.0-8-amd64 `
    -append "root=/dev/vda1" `
    -m 1024M `
    -netdev user,id=Wi-Fi,hostfwd=tcp::2222-:22 `
    -device virtio-net,netdev=Wi-Fi `
    -drive file=exploit-education-phoenix-amd64.qcow2,if=virtio,format=qcow2,index=0

Power Shell Execution Policy

Get-Execution-Policy
Set-Execution-Policy Unrestricted

Booting Phoenix

.\boot-phoenix.ps1

Permit Rootlogin

nano /etc/ssh/sshd_config
Permit-RootLogin yes

Now we can login with ssh

ssh user@192.168.43.234 -p2222

Challenge Directory

user@phoenix-amd64:~$ ls /opt/phoenix/amd64/
final-one    format-three  heap-two   stack-five   stack-two
final-two    format-two    heap-zero  stack-four   stack-zero
final-zero   format-zero   net-one    stack-one
format-four  heap-one      net-two    stack-six
format-one   heap-three    net-zero   stack-three

64-bits Binary

user@phoenix-amd64:~$ file /opt/phoenix/amd64/stack-zero
/opt/phoenix/amd64/stack-zero: setuid, setgid ELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /opt/phoenix/x86_64-linux-musl/lib/ld-musl-x86_64.so.1, not stripped