High within the section, where you going to solve another virtual machine, another vulnerable machine
called freestyle leagues and again, this is in Dotcom's, so you can come over here to one half.com
and search for foresty in order to freely reach this.
OK, so this is freestyle leagues, one point three.
And that's the thing that we are looking for.
And indeed, this is a little bit similar to Mr. Robot, the previous CTF that we have sold.
But again, this has another techniques, different techniques that we have previously learned about.
So we going to learn new things and also re going to practice the old things that we have learned so
far in this course and we're going to solve.
So maybe you can try to give it a shot before you just follow along with the course and see how far
you can get over here.
OK, so maybe you may want to pause the video and try this one yourself and then come back and see the
solution that I have in mind.
So over here we are in the freestyle leagues.
And again, this is a vulnerable machine, a virtual machine.
Just click over here to download the OVA.
This is around 700 megs and read the description over here.
As you can see, the stylus it one more time enumeration following the breadcrumbs in order to find
the solution.
And the goal is to get the root and read the flag file.
Here we have a small description, small virtual machine made for Dutch informal hacker meeting called
up freestyler.
So this is again built for Hekker meeting.
So it's supposed to be good.
So it's meant to be broken in a few hours without requiring debuggers, reverse engineering, etc..
So we don't know how many flags we have over here, but we do know that we have to get through it every
day.
FLAC So if you're Yamba's, you're going to have to manually that these VMS make a dress to this one.
And of course this is also valid for virtual bucks as well.
So if your virtual Xbox doesn't actually open this in a regular fashion, make sure you edit the mic
over there as it's instructed like this.
OK, so let's see if we have to do that.
I'm going to come over here and as you can see, my colonics is running on that network.
So what I'm going to do, I'm going to double click on the face of leaks and just import this and leave
this as it is.
And it says that guest OS type is a red hat.
So I'm going to leave this as it is and see what happens.
So seeks to forbid and come over here to settings and over there, the system has far from the max,
so maybe I can just make it Vanik, OK?
And it isn't necessary.
We're not going to do much in this one as well.
But again, I have 32 gig, so I'm going to come over here and make this Internet network and just do
a little all for promiscuous mode.
And here we have the Mac address, so let's check that.
So over here, it says that your Mac address should be this one.
So let's check and see if this is the same thing.
And here you go.
We have some differences over here.
I'm going to change this, OK, as it's instructed in the page.
So let's come over here and say, OK, so if you had any problems with that, if you tried to post the
video and solve it on your own and had a problem with that, then now you know how to solve this.
OK, maybe in this step you may want to post the video and give it a shot because we have learned so
many things even now.
Maybe you can just hectors pectus.
OK, so here we have the IP address, which is very good.
So I won't bother with net discover and map.
So Tenno to 216.
I'm going to come over here to my color Linux and if config and here you go.
I have 10 or too far so I'm entitled to four.
I'm going to go for 10 or two, 16.
And you can go in like in Zenab for in Tuscon or you can just choose anything you want from here and
run it on and map on your terminal.
I'm going to run this on my terminal as usual.
OK, so I'm going to place this thing over here and I'm going to run this against Anota 16 years ago.
So I'm running a fast scan, as you can see, in a verbose mode.
And I believe the first scan will be enough for us.
But if it doesn't, if it isn't the case, we can always go back and search for old ports or old UDP
or TCP ports.
I'm going to go into my kit folder and create a new folder called Freestyle Leaks, as we have done
before, because we're going to need to take some notes here as well.
So inside of this folder, I'm going to NENO and not start so that we can take notes.
Here you go.
Our EMAP skin seems to be completed, so I'm going to copy everything over here so that if we need later
on, we can come back and see what's going on.
So let me choose one more time.
And yep, it seems that I cannot do that for some reason.
Yep.
Here you go.
Finally select that thing and here you go.
I'm going to control or enter and control leaks out of this one to save it.
And here you go.
So let's scan the map results over here.
So what we have over here, let me just scroll down.
We have eighty port open.
OK, so again, a weapon testing thingy going on.
We have robots that texte and managed to find it as well.
So we are going to definitely take a look at this 3D.
I loved entries, cold beer.
We're going to see what are those things?
We have the Linux running over here.
As usual.
We have some specific kernel thingee or there like two point six.
So let me come back and I know the eighty percent is open and it seems that nothing else is open.
OK, we're going to take a look at this, of course.
And here you go.
We have sent us as a Linux operating system over here.
So it's a little bit different than we have seen before where you get to see what we can do with it.
And it seems that we don't have anything in the end.
That's right.
Because we only found eighty percent is open.
Of course, we are going to take a look at that.
But first, I'm going to run Ecto, OK, against Tunnel to sixteen and see what kind of information
can we get from here.
And again, NICTA is vulnerable to Skinner for fantastique.
It's an entry point.
It won't do much in real life that pantheistic scenarios, but it will do much in CTF.
So make a note of that as well.
So here you go.
As you can see, we have some kind of different icons, images, folders over here that we can see.
So it found the robots that see as well, but we already knew that.
So I'm just going to go straight into 2016 to see the Web server.
So here you go, the free.
Obliques motto is keep calm and drink free stuff.
So it seems like Free City is some kind of a drink.
I don't know, some kind of beverage.
So this website should be about the free Steve.
If I click on this, it will take us to the Twitter page for some reason.
Yeah, for the hashtag so we can see the freestyler hashtags over here.
So I'm going to come back and we have some like credits tingay over here, I believe.
So these these should be the holders of this VM maybe, but also they may be some kind of hint as well,
like user names.
So what I'm going to do, I'm going to come over here and search for the robots that we know that it
exists.
So I'm going to come up and just zoom in a little bit to see the disallowed content over here.
So let's go for Kurla and say this is not the URL that you're looking for.
Yes, starwars thingy coming up.
OK, so I'm going to go for CCE and I don't know what CCE is, but it should be is some kind of bayridge,
I believe, or drink because, yeah, we get the same image in everywhere and we're looking for beer
cola ksi.
So let's see, this image resides under the images folder.
OK, and let's see the source for this one.
Yep.
They all point to same image and I believe there is nothing over here.
Deep voice Right.
So about the robots that should have a meaning.
Right.
So for maybe we can go for the images folder.
I believe we had something else other than images.
OK, like icons.
Yeah, there is nothing over here.
Maybe we can try.
I can.
It's not that important under the images.
We don't have anything.
Besides, this is not the URL that we are looking for and also the image over here.
But again, so these robots that should do something.
And if you pay attention over here, Freestar is a drink as well.
Right.
So I'm going to come over here to page source and show you that there is nothing over here as well.
So no tip, no hints, anything.
So it only says that.
Yeah, your goal is to get through it.
Yeah, we know that already.
And it says that this should be doable in four hours.
Great.
So what I did over here when I first solved this CTF is to think that yeah, Freestar is a drink and
so is cola and beer and hopefully CESI, I don't know what is Sisse.
So I came over here and tried Foresty as well.
It was just a hunch.
But why not.
Right, because we have cola, we have beer, we have C.C..
Why not.
We have three and here you go.
We are inside of the freestyle leaks admin portal.
So of course at this point you can think that.
Yeah.
How the hell this is supposed to teach us something.
Right, because we took a guess and it's worked.
And most of the time it's the same scenario in real life examples as well.
For example, you always have to try for slash admin or slash administrator, and I have already tried
them in here as well.
But again, this is maybe some kind of haunch, maybe some kind of experience.
But eventually, anyway, we found the frisee admin portal and we don't have any other leads over here.
I believe we have a username and password looking over there, but we don't know how to log in.
So we're going to try various things in order to do that.
But we're going to do that within the next lecture.