环境：使用AWS Ubuntu22.04服务器加州IP连接VPN（免费白嫖一年）

  • 首次登录记得获取root权限，要不然连接openvpn一直错误
1
2
sudo passwd root
su root

只是看了攻略，连接这块提到ssh隧道转发，但是最后发现其实并不需要很复杂的隧道转发

不过怎么样还是学了一些关于ssh转发的知识

Xshell隧道转发：https://blog.csdn.net/weixin_38491225/article/details/125923278

至于连接实验环境：

  • 使用root连接VPN，下载文件openvpn打开 > 连接后可继续做题
  • 使用user扫描靶机IP拿到flag
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
ubuntu@ip:~$ nmap -sV 10.129.237.214
Command 'nmap' not found, but can be installed with:
sudo snap install nmap  # version 7.93, or
sudo apt  install nmap  # version 7.91+dfsg1+really7.80+dfsg1-2ubuntu0.1
See 'snap info nmap' for additional versions.

ubuntu@ip:~$ sudo snap install nmap
nmap 7.93 from Maximiliano Bertacchini (maxiberta) installed

ubuntu@ip:~$ nmap -sV 10.129.237.214
Starting Nmap 7.93 ( https://nmap.org ) at 2023-06-30 17:17 UTC
Note: Host seems down. If it is really up, but blocking our ping probes, try -Pn
Nmap done: 1 IP address (0 hosts up) scanned in 3.34 seconds

ubuntu@ip:~$ nmap -sV 10.129.237.214
Starting Nmap 7.93 ( https://nmap.org ) at 2023-06-30 17:20 UTC
Nmap scan report for ip-10-129-237-214.us-west-1.compute.internal (10.129.237.214)
Host is up (0.078s latency).
Not shown: 999 closed tcp ports (conn-refused)
PORT   STATE SERVICE VERSION
23/tcp open  telnet  Linux telnetd
Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel

Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 12.80 seconds

ubuntu@ip:~$ telnet 10.129.237.214
Trying 10.129.237.214...
Connected to 10.129.237.214.
Escape character is '^]'.

  █  █         ▐▌     ▄█▄ █          ▄▄▄▄
  █▄▄█ ▀▀█ █▀▀ ▐▌▄▀    █  █▀█ █▀█    █▌▄█ ▄▀▀▄ ▀▄▀
  █  █ █▄█ █▄▄ ▐█▀▄    █  █ █ █▄▄    █▌▄█ ▀▄▄▀ █▀█


Meow login: root
Welcome to Ubuntu 20.04.2 LTS (GNU/Linux 5.4.0-77-generic x86_64)

 * Documentation:  https://help.ubuntu.com
 * Management:     https://landscape.canonical.com
 * Support:        https://ubuntu.com/advantage

  System information as of Fri 30 Jun 2023 05:28:39 PM UTC

  System load:           0.0
  Usage of /:            41.7% of 7.75GB
  Memory usage:          4%
  Swap usage:            0%
  Processes:             138
  Users logged in:       0
  IPv4 address for eth0: 10.129.237.214
  IPv6 address for eth0: dead:beef::250:56ff:feb9:bd29


75 updates can be applied immediately.
31 of these updates are standard security updates.
To see these additional updates run: apt list --upgradable


The list of available updates is more than a week old.
To check for new updates run: sudo apt update

Last login: Mon Sep  6 15:15:23 UTC 2021 from 10.10.14.18 on pts/0
root@Meow:~# ls
flag.txt  snap
root@Meow:~# 
root@Meow:~# cat flag.txt 
b40abdfe23665f766f9c61ecba8a4c19
root@Meow:~#

最终第一关过了，因为是最简单的关卡，题倒没什么难的，仿佛在做英语阅读…..

第一关过了hhh

许可协议

本文由FlowsecNagi编写，采用非商业性使用-相同方式共享 4.0 国际](https://creativecommons.org/licenses/by-nc-sa/4.0/) 许可协议，转载请注明出处。

快来参与讨论吧~