In this video, we are going to hack into Dancing Machine, which is the third machine on Hack the Box
Starting Point.
Just click on Connect to the Box.
Download your open VPN credentials.
And save them.
Now open your download folder.
Open the terminal in the same folder by right clicking in the folder.
And use the command open VPN and your file name to start the VPN.
It's an error.
We need to start this with pseudo.
Repeat the command with pseudo.
Now to check whether we are connected.
Give the command if config.
And you can see that we are connected on Channel Zero interface.
No.
Spawn your machine.
It will take a while to spawn.
Node down the target IP address.
No, let's just ping our machine.
And we can confirm that our target machine is up and running.
So let's first answer some questions on the box.
So the first question is what does the three letter acronym stands for?
Which is server message block to submit the answer.
Now, the second question is what port does SMB use to operate it, which is four, four, five?
So the next question is what is the service name for what, four or five that came up in our NMAP scan?
So let's first start our NMAP scan.
It was the command as shown on the screen.
35 and minimum rate will speed up the process.
The app will run scan on all available ports.
Dash V is the verbose scan.
So our scan is complete.
Roll up.
And you can see the service name is Microsoft.
Yes.
Just copy it.
And paste it in the box.
Well, the next question is what is the flag or switch that we can use with the assembly tool to list
the contents of the share?
Which is Dash L.
Let's try that on our target.
Use the command SNMP client with the IP address and flag.
Use the blank password.
And we can see that four shares are listed for our target.
So let's just go back to the box.
So the next question is how many chairs are there on dancing, which are for.
The next question is what is the name of the share we are able to access in the end with a blank password?
So let's just try to assess work, share, share.
Use the command as shown on the screen.
And we are able to gain access to the share.
We can list the files with the list command.
So let's just go back and answer the question.
So we were able to access work shares folder.
So the next question is what is the command we can use with SNMP shell to download the files we find?
Let's just try to find and download the flag file.
And we can see that we have our flagged text file in James folder.
Use the get command to download it.
And we have downgraded our flag file.
So open a new terminal.
And use the cat command to cat out the contents.
Copy the flag and go back to check the box.
And so I made the flag.
And we have successfully hacked into Dancing Machine.