풀이
┌──(root㉿kali)-[~/raccoon/rcity]
└─# ssh rcity7@ctf.redraccoon.kr -p 31338
rcity7@ctf.redraccoon.kr's password:
rcity7@04d1eb9322c1:~$ ls -l
total 0
rcity7@04d1eb9322c1:~$ ss
-bash: ss: command not found
rcity7@04d1eb9322c1:~$ lsof
-bash: lsof: command not found
rcity7@04d1eb9322c1:~$ nestat
-bash: nestat: command not found
rcity7@04d1eb9322c1:~$ nmap localhost
Starting Nmap 7.80 ( https://nmap.org ) at 2024-03-31 02:40 UTC
Nmap scan report for localhost (127.0.0.1)
Host is up (0.000096s latency).
Other addresses for localhost (not scanned): ::1
Not shown: 998 closed ports
PORT STATE SERVICE
22/tcp open ssh
9999/tcp open abyss
Nmap done: 1 IP address (1 host up) scanned in 0.10 seconds
rcity7@04d1eb9322c1:~$ nc localhost 9999
[+] 20초 안에 현재 유저의 비밀번호를 입력하세요: h5Z8D2G4cW7L6x0R3f9
[+] Correct password received. Flag: F6jR2K3qH1gW7X5b0S9
사용하고 있는 포트를 확인하기 위해서 ss, lsof, netstat를 써봣지만 안되서 nmap 을 사용
9999 포트가 열려있어서 netcat -> nc 명령어를 사용하여 연결한 다음에 flag 획득
'rcity' 카테고리의 다른 글
| rcity9 Write-Up (1) | 2024.03.31 |
|---|---|
| rcity8 Write-Up (1) | 2024.03.31 |
| rcity6 Write-Up (1) | 2024.03.31 |
| rcity5 Write-Up (0) | 2024.03.31 |
| rcity4 Write-Up (0) | 2024.03.31 |