FTP to SSH shell | password dumps – FunboxRookie @ PG Practice

➜ ~ This video is about FunboxRookie, a simple difficulty linux machine on PG Practice , in offensive security platform. It involves getting FTP access and downloading zip files from the ftp server.We use john to crack the zip archives as they are password protected and we get an id_rsa which we use to login into the box.
➜ ~ For root, we find the password for the current user in history files and funny enough he can execute any commands as root!

[ Timestamps ]
00:00 Intro
00:35 User Flag
04:49 Root Flag
05:25 End

[ About ]
• https://twitter.com/trustie_rity
• https://github.com/johnkiguru1337
• https://www.patreon.com/trustie_rity

source

by Trust Hackers

linux ftp command