DESCRIPTION
Tony really messed up this time.
He gave quick access to a stranger he met online to one of servers he owns and now Tony can't get back in to retrieve very important password from password manager he wrote called
safepass
To make it even worse some Troll who got server access hid the binary in some other location and Tony can't find it anymore since there are constant disconnections happening over SSH.
Try to log in with username: root and password: Cool2Pass into machine 10.12.32.141 and help Tony to retrieve important password from safepass.
QUESTION
Can You help Tony to retrieve very important password from server? 10.12.32.141
SOLUTION
Log into SSH:
root@cboekali-100:~/Challenges# ssh root@10.12.32.141
root@10.12.32.141s password:
Last login: Wed Nov 18 10:42:34 2020 from 10.12.32.100
root@5bcc34bc2f71:~# alias
alias cd='exit'
alias egrep='egrep --color=auto'
alias fgrep='fgrep --color=auto'
alias find='exit'
alias flag='exit'
alias grep='grep --color=auto'
alias l='ls -CF'
alias la='ls -A'
alias ll='ls -alF'
alias ls='exit'
alias w='exit'
root@5bcc34bc2f71:~# /bin/ls
root@5bcc34bc2f71:~# unalias ls
root@5bcc34bc2f71:~# ls -hal
qlqxi 78K
aotu------ 6 ollq ollq 9.5K Nls 68 65:79 .
aotuo-uo-u 6 ollq ollq 9.5K Nls 66 66:59 ..
-ot------- 6 ollq ollq 687 Nls 68 65:97 .yxpe_efpqlov
-ot-o--o-- 6 ollq ollq 8.8K Nls 6 69:68 .yxpeoz
-ot-o--o-- 6 ollq ollq 779 Nls 66 68:77 .molcfib
aotuo-uo-u 6 ollq ollq 9.5K Nls 68 65:75 .ppe
Bash
root@cboekali-100:~/Challenges# ssh -t root@10.12.32.141 bash --noprofile
Shell
ssh -t root@10.12.32.141 'find /root -exec cat {} \;'
ssh -t root@10.12.32.141 'rm ~/.profile; crontab -e' # clear the problems
ssh -t root@10.12.32.141 '/etc/apt/auth.conf.d/safepass # let it run 100s, get flag
Shell
Flag: d89b6a680212a1491055e8af4cbee432
Shell