# Task 1

Q:What does the acronym VM stand for?

A:virtual machine

# Task 2

Q:What tool do we use to interact with the operating system in order to start our VPN connection?

A:terminal

# Task 3


Q:What service do we use to form our VPN connection?

A:openvpn

# Task 4

Q:What is the abreviated name for a tunnel interface in the output of your VPN boot-up sequence output?

A:tun

# Task 5

Q:What tool do we use to test our connection to the target?

A:ping

# Task 6

Q:What is the name of the tool we use to scan the target's ports?

A:nmap

# Task 7

Q:What service do we identify on port 23/tcp during our scans?

A:telnet

# Task 8

Q:What username ultimately works with the remote management login prompt for the target?

这个问的是机器的用户名是啥,那只能连上去看看了

# 0x01 信息收集

直接拿 nmap 扫一下

nmap

┌──(root💀kali)-[~]
└─# nmap 10.129.69.56
Starting Nmap 7.92 ( https://nmap.org ) at 2022-04-27 20:33 CST
Nmap scan report for 10.129.69.56
Host is up (0.45s latency).
Not shown: 999 closed tcp ports (reset)
PORT   STATE SERVICE
23/tcp open  telnet
Nmap done: 1 IP address (1 host up) scanned in 4.75 seconds

发现开放了 telnet 服务,那么我们直接连上去

telnet

┌──(root💀kali)-[~]
└─# telnet 10.129.69.56
Trying 10.129.69.56...
Connected to 10.129.69.56.
Escape character is '^]'.
  █  █         ▐▌     ▄█▄ █          ▄▄▄▄
  █▄▄█ ▀▀█ █▀▀ ▐▌▄▀    █  █▀█ █▀█    █▌▄█ ▄▀▀▄ ▀▄▀
  █  █ █▄█ █▄▄ ▐█▀▄    █  █ █ █▄▄    █▌▄█ ▀▄▄▀ █▀█
Meow login: root
Welcome to Ubuntu 20.04.2 LTS (GNU/Linux 5.4.0-77-generic x86_64)
 * Documentation:  https://help.ubuntu.com
 * Management:     https://landscape.canonical.com
 * Support:        https://ubuntu.com/advantage
  System information as of Wed 27 Apr 2022 12:36:35 PM UTC
  System load:           0.0
  Usage of /:            41.7% of 7.75GB
  Memory usage:          4%
  Swap usage:            0%
  Processes:             142
  Users logged in:       1
  IPv4 address for eth0: 10.129.69.56
  IPv6 address for eth0: dead:beef::250:56ff:feb9:d656
 * Super-optimized for small spaces - read how we shrank the memory
   footprint of MicroK8s to make it the smallest full K8s around.
   https://ubuntu.com/blog/microk8s-memory-optimisation
75 updates can be applied immediately.
31 of these updates are standard security updates.
To see these additional updates run: apt list --upgradable
The list of available updates is more than a week old.
To check for new updates run: sudo apt update
Failed to connect to https://changelogs.ubuntu.com/meta-release-lts. Check your Internet connection or proxy settings
Last login: Wed Apr 27 12:22:06 UTC 2022 on pts/0
root@Meow:~#

这样我们就知道了这台机器的账户是 root

A:root

# Task 9

Q:Submit root flag

寻找 flag

flag

Last login: Wed Apr 27 12:22:06 UTC 2022 on pts/0
root@Meow:~# ls
flag.txt  snap
root@Meow:~# cat flag.txt
b40abdfe23665f766f9c61ecba8a4c19
root@Meow:~#

ls 查看一下当前目录,发现了 flag.txt


那么我们直接 cat flag.txt 得到了 flag