Toppo : 1

Description ⤵️

💡 Toppo ➡️

The Machine is not hard to own and do not require advanced exploitation .

Level : Beginner

DHCP : activated

Inside the zip you will find a vmdk file , and I think you will be able to use it with any usual virtualization software ( tested with Virtualbox) .

If you have any question : my twitter is @h4d3sw0rm

Happy Hacking !

Let’s find the IP Address first »

IP : 10.0.2.15

Port Scan Results ➡️

OPEN PORTS >
22     SSH (Needs credentials)
80     HTTP (Enumeration Further !)
111    rpcbind (no luck)
41060  PRC (no luck same)

---

Web Enumeration ⤵️

12345ted123

Now I guessed the username as ted as a hint from password →

while checking SUID I got this →

So lets try a simple tty shell with python →

---

If you have any questions or suggestions, please leave a comment below. Thank You !