🎲🎲 mKingdom – TryHackMe – CTF – concrete 5-8.5.2
🎲 Beginner-friendly box inspired by a certain mustache man.🎲
🎲Scripts Used:
concrete5-8.5.2 Remote Code Execution
https://hackerone.com/reports/768322
🎲Reverse php shell:
https://github.com/pentestmonkey/php-reverse-shell/blob/master/php-reverse-shell.php
🎲pspy – unprivileged Linux process snooping:
https://github.com/DominicBreuker/pspy
#tryhackme
by Djalil Ayed
linux ftp command
Please subscribe to get the latest videos https://www.youtube.com/@djalilayed
need more work on voice-over! good explanation.
Can you share the beginning of your .opvn file? I can't connect for 2 days, my .ovpn have this:
client
dev tun
proto udp
sndbuf 0
rcvbuf 0
remote EU-VIP-1 1194
resolv-retry infinite
nobind
explicit-exit-notify 3
persist-key
persist-tun
remote-cert-tls server
auth SHA512
data-ciphers AES-256-CBC
comp-lzo
key-direction 1
verb 3
reneg-sec 0
My openvpn version:
└─$ openvpn –version
OpenVPN 2.6.10 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] [DCO]
library versions: OpenSSL 3.2.2-dev , LZO 2.10
DCO version: N/A
Originally developed by James Yonan
Copyright (C) 2002-2024 OpenVPN Inc <sales@openvpn.net>
Compile time defines: enable_async_push=no enable_comp_stub=no enable_crypto_ofb_cfb=yes enable_dco=auto enable_dco_arg=auto enable_debug=yes enable_dlopen=unknown enable_dlopen_self=unknown enable_dlopen_self_static=unknown enable_fast_install=needless enable_fragment=yes enable_iproute2=no enable_libtool_lock=yes enable_lz4=yes enable_lzo=yes enable_management=yes enable_pam_dlopen=no enable_pedantic=no enable_pkcs11=no enable_plugin_auth_pam=yes enable_plugin_down_root=yes enable_plugins=yes enable_port_share=yes enable_selinux=no enable_shared=yes enable_shared_with_static_runtimes=no enable_small=no enable_static=yes enable_strict=no enable_strict_options=no enable_systemd=no enable_werror=no enable_win32_dll=yes enable_wolfssl_options_h=yes enable_x509_alt_username=no with_aix_soname=aix with_crypto_library=openssl with_gnu_ld=yes with_mem_check=no with_openssl_engine=auto with_sysroot=no
In Wireshark:
P_CONTROL_HARD_RESET_CLIENT_V2 [Malformed Packet]
openvpn log:
2024-06-17 09:22:22 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
2024-06-17 09:22:22 Note: –cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '–data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to –data-ciphers.
2024-06-17 09:22:22 Note: '–allow-compression' is not set to 'no', disabling data channel offload.
2024-06-17 09:22:22 OpenVPN 2.6.10 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] [DCO]
2024-06-17 09:22:22 library versions: OpenSSL 3.2.2-dev , LZO 2.10
2024-06-17 09:22:22 DCO version: N/A
2024-06-17 09:22:22 TCP/UDP: Preserving recently used remote address: [AF_INET]EU-VIP-1:1194
2024-06-17 09:22:22 Socket Buffers: R=[212992->212992] S=[212992->212992]
2024-06-17 09:22:22 UDPv4 link local: (not bound)
2024-06-17 09:22:22 UDPv4 link remote: [AF_INET]EU-VIP-1:1194
2024-06-17 09:23:22 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2024-06-17 09:23:22 TLS Error: TLS handshake failed
2024-06-17 09:23:22 SIGUSR1[soft,tls-error] received, process restarting
2024-06-17 09:23:22 Restart pause, 1 second(s)
2024-06-17 09:23:23 TCP/UDP: Preserving recently used remote address: [AF_INET]EU-VIP-1:1194
2024-06-17 09:23:23 Socket Buffers: R=[212992->212992] S=[212992->212992]
2024-06-17 09:23:23 UDPv4 link local: (not bound)
2024-06-17 09:23:23 UDPv4 link remote: [AF_INET]EU-VIP-1:1194
2024-06-17 09:24:23 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
It keeps going up to Restart pause, 300 second(s). I edited the actual IP to EU-VIP-1 here.
nice explanation keep going