Nebula Level 05

Nebula 05

Check the flag05 home directory. You are looking for weak directory permissions

flag05a-bak

In the flag05 folder are two hidden folders. The .ssh we do not have read permission into. However, the .backup folder we do.

flag05b-back

In side the .backup folder is a compressed archive. When we look inside we see a backup copy of the .ssh we couldn’t access earlier.

flag05c-back

We extract the contents of the archive into our home folder.

flag05d

We can now ssh into the machine as flag05 using the .ssh credentials.

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s