Posts

Showing posts from August, 2022

mrrobot Writeup(Walkthrough Step by Step)

Image
 Mr. Robot Walkthrough The VM is called  Mr Robot  and is themed after the TV show of the same name. It contains 3 flags to find, each of increasing difficulty. ____________________________________ Let’s start by a quick port scan. $ nmap -sS -T4 target Starting Nmap 7.25BETA2 ( https://nmap.org ) at 2017-04-03 12:25 EDT Nmap scan report for vm ( target ) Host is up (0.00025s latency). PORT STATE SERVICE 22/tcp closed ssh 80/tcp open http 443/tcp open https Nothing fancy, just a web server running. The website basically tells you a few things, and lets you input some commands. After a quick test, those don’t seem very useful. As always, I then start by taking a look at the robots.txt file. /robots.txt User-agent: * fsocity.dic key-1-of-3.txt Alright, we already have the first flag! The second file looks promising. $ file fsocity.dic fsocity.dic: ASCII text, with very long lines $ cat fsocity.dic | wc -l 858160 fsocity.dic $ head fsocity.dic true false wiki...