Task 5
What strange text file is in the website root directory?
test; lsAnswer
drpepper.txt
How many non-root/non-service/non-daemon users are there?
test; cat /etc/passwdAnswer
0
What user is this app running as?
test; whoamiAnswer
www-data
What is the user's shell set as?
test; cat /etc/passwd |grep www-dataAnswer
/usr/sbin/nologin
What version of Ubuntu is running?
Answer
18.04.4
Print out the MOTD. What favorite beverage is shown?
Answer
Dr Pepper
EXTRA
Spawn remote shell in that machine
On your machine
Open a localport on your machine
On vulnerable webpage
Spawn this remote shell in the search input.
Replace 10.18.1.159 with your own VPN IP
Last updated