linux ftp serverLinux serverNETWORK ADMINISTRATIONS

🎲🎲 mKingdom – TryHackMe – CTF – concrete 5-8.5.2

🎲 Beginner-friendly box inspired by a certain mustache man.🎲

🎲Scripts Used:
concrete5-8.5.2 Remote Code Execution
https://hackerone.com/reports/768322

🎲Reverse php shell:
https://github.com/pentestmonkey/php-reverse-shell/blob/master/php-reverse-shell.php

🎲pspy – unprivileged Linux process snooping:
https://github.com/DominicBreuker/pspy

#tryhackme

source

by Djalil Ayed

linux ftp command

4 thoughts on “🎲🎲 mKingdom – TryHackMe – CTF – concrete 5-8.5.2

  • Can you share the beginning of your .opvn file? I can't connect for 2 days, my .ovpn have this:

    client
    dev tun
    proto udp
    sndbuf 0
    rcvbuf 0
    remote EU-VIP-1 1194
    resolv-retry infinite
    nobind
    explicit-exit-notify 3
    persist-key
    persist-tun
    remote-cert-tls server
    auth SHA512
    data-ciphers AES-256-CBC
    comp-lzo
    key-direction 1
    verb 3
    reneg-sec 0

    My openvpn version:

    └─$ openvpn –version
    OpenVPN 2.6.10 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] [DCO]
    library versions: OpenSSL 3.2.2-dev , LZO 2.10
    DCO version: N/A
    Originally developed by James Yonan
    Copyright (C) 2002-2024 OpenVPN Inc <sales@openvpn.net>
    Compile time defines: enable_async_push=no enable_comp_stub=no enable_crypto_ofb_cfb=yes enable_dco=auto enable_dco_arg=auto enable_debug=yes enable_dlopen=unknown enable_dlopen_self=unknown enable_dlopen_self_static=unknown enable_fast_install=needless enable_fragment=yes enable_iproute2=no enable_libtool_lock=yes enable_lz4=yes enable_lzo=yes enable_management=yes enable_pam_dlopen=no enable_pedantic=no enable_pkcs11=no enable_plugin_auth_pam=yes enable_plugin_down_root=yes enable_plugins=yes enable_port_share=yes enable_selinux=no enable_shared=yes enable_shared_with_static_runtimes=no enable_small=no enable_static=yes enable_strict=no enable_strict_options=no enable_systemd=no enable_werror=no enable_win32_dll=yes enable_wolfssl_options_h=yes enable_x509_alt_username=no with_aix_soname=aix with_crypto_library=openssl with_gnu_ld=yes with_mem_check=no with_openssl_engine=auto with_sysroot=no

    In Wireshark:

    P_CONTROL_HARD_RESET_CLIENT_V2 [Malformed Packet]

    openvpn log:

    2024-06-17 09:22:22 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
    2024-06-17 09:22:22 Note: –cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '–data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to –data-ciphers.
    2024-06-17 09:22:22 Note: '–allow-compression' is not set to 'no', disabling data channel offload.
    2024-06-17 09:22:22 OpenVPN 2.6.10 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] [DCO]
    2024-06-17 09:22:22 library versions: OpenSSL 3.2.2-dev , LZO 2.10
    2024-06-17 09:22:22 DCO version: N/A
    2024-06-17 09:22:22 TCP/UDP: Preserving recently used remote address: [AF_INET]EU-VIP-1:1194
    2024-06-17 09:22:22 Socket Buffers: R=[212992->212992] S=[212992->212992]
    2024-06-17 09:22:22 UDPv4 link local: (not bound)
    2024-06-17 09:22:22 UDPv4 link remote: [AF_INET]EU-VIP-1:1194
    2024-06-17 09:23:22 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
    2024-06-17 09:23:22 TLS Error: TLS handshake failed
    2024-06-17 09:23:22 SIGUSR1[soft,tls-error] received, process restarting
    2024-06-17 09:23:22 Restart pause, 1 second(s)
    2024-06-17 09:23:23 TCP/UDP: Preserving recently used remote address: [AF_INET]EU-VIP-1:1194
    2024-06-17 09:23:23 Socket Buffers: R=[212992->212992] S=[212992->212992]
    2024-06-17 09:23:23 UDPv4 link local: (not bound)
    2024-06-17 09:23:23 UDPv4 link remote: [AF_INET]EU-VIP-1:1194
    2024-06-17 09:24:23 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)

    It keeps going up to Restart pause, 300 second(s). I edited the actual IP to EU-VIP-1 here.

Comments are closed.