Friendly2

Description

Friendly2 is a beginner machine created by RiJaba1

Friendly2

Walk through

Enumeration

Port Enumeration

Basic PORT enumeration with NMAP

nmap -Pn -n -p- --min-rate 5000 --open $TARGET

*Note: in my case $TARGET is 192.168.1.69 *

The reported ports are

PORT   STATE SERVICE
22/tcp open  ssh
80/tcp open  http

Now lets enumerate the services running on each port with

nmap -sCV -p 22,80 --min-rate 5000 $TARGET

Just a basic Web page is showed

PORT   STATE SERVICE VERSION
22/tcp open  ssh     OpenSSH 8.4p1 Debian 5+deb11u1 (protocol 2.0)
| ssh-hostkey: 
|   3072 74:fd:f1:a7:47:5b:ad:8e:8a:31:02:fe:44:28:9f:d2 (RSA)
|   256 16:f0:de:51:09:ff:fc:08:a2:9a:69:a0:ad:42:a0:48 (ECDSA)
|_  256 65:0e:ed:44:e2:3e:f0:e7:60:0c:75:93:63:95:20:56 (ED25519)
80/tcp open  http    Apache httpd 2.4.56 ((Debian))
|_http-server-header: Apache/2.4.56 (Debian)
|_http-title: Servicio de Mantenimiento de Ordenadores

The page look like this

FUZZING

Lets see behind the scene and go to do a Fuzz with Dirbuster Just a little interesting files appear, lets see inside of tools

Again nothing interesting

The other files are just images. We can search info in the source code of the page In Firefox you can use ctr + u to take a look

In the comments we can find info, a php file

Exploitation

When we go to the path and we can see a

Post-Explotation

Get user

References