Dino Hacks

Kioptrix level 2 is a boot-to-root machine. Let's hack this machine! Setup is same as kioptrix level 1. So first, we need to find the ip address of the machine. So,192.168.56.103 is the ip address of the Kioptrix level 2 machine. Let's run nmap scan: 192.168.56.103 As per our scan, we have SSH, a website , CUPS and MySql running. I tried connecting to ssh, nothing happened. Also, I couldn't find the exploit for this version openssh. Website Let's check out the website: http://192.168.56.103:80 Well, the website has a login form. Let's see if it is vulnerable for sql injection.  Boom!! We got in! This might be vulnerable for command injection. Let's try. Well, it is vulnerable to command injection!! We have apache user permissions. So, we need to try escalate our privileges to root by using a local privilege escalation. For that, let's find the details of OS version and linux kernel. So, we have know that li...

Kioptrix level 1 is one of the easiest boot-to-root machine. It is best suited for beginners to practice their pentesting skills. In this article, we will talk about how to hack kioptrix level 1. Kioptrix level 1 is Red-hat linux 32 bit machine which can easily be run with just 512 MB. You can download the virtual machine from the vulnhub. I hope the reader of this article can figure out how to setup this in a virtual machine. The host machine would be kali 2019.3. The virtualbox version is 6.0. So,after booting up the machine from the virtualbox, we need to find its ip address.We will use the tool netdiscover. The result: 192.168.56.102 is the kioptrix machine. Let's run a simple nmap scan using this ip address. The result: So, basically, we have 6 ports open. Port 22 is ssh using OpenSSH 2.9p2. Port 80 and 443 are using Apache 1.3.20 and mod_ssl version 2.8.4. We also have port 32768 and port 111 which seems to RPCs. Lastly, we have port 139 running samba but...