all right so meow this is my IP address and what I'm going to do here is just uh clear the entire
machine so I'm going to reset the machine here so we can start from the beginning all right let's go
with the first question what does the acronym VM stand for that one is super easy so obviously it's
going to be virtual machine virtual machine right so this is what we're going to be using and this
is what pen testers using use quite a bit then the second one is what tool do we use to interact with
the operating system in order to issue commands that one is very easy also and that should be
the terminal all right so terminal that is the second answer let's get moving with number three
so number three says what service do we use for our VPN connection into uh hdb Labs so that one
is easy too it is open VPN and that's so easy to use uh let me just show you I am using it right
here so this is openvpn so the command that I put in was uh openvpn starting point then Duran uh dot
ovpn right so this is the command that you use for launching your VPN let's submit this answer
okay so that's done then what is the abbreviated name for a tunnel interface in the output of your
VPN okay so what they're referring to here is let me just power up this and I'm gonna
go into my network and the way you do that is by typing IP a like that so you see your
entire network connections in here uh and they're referring to this one so this is your IP address
that is assigned to you by the openvpn or the VPN connection from hack the box so it is t-u-n-0 so
they are referring to t-u-n in here right submit that answer the next one what tool do we use to
test our connection to the target with an icmp echo request that one is super easy and if you
don't know that one then you should get familiar with your networking tool so that would be a ping
right so we're gonna ping let's ping the server so let's go here and I'm just going to copy this
by clicking go back to my terminal and then I'm going to Ping the IP address like that and as
you can see we're receiving data from the IP address there's a lot of other commands that
you can use you can use for example trace route so I'm going to do a trace route uh route to Google
and see what it takes how many hops it takes to get to Google so this is the Google IP address
and then it starts from my internal IP address for my router then that goes into the external
IP address and different hubs so this is a really good tool trace route to be able to
you know determine any bottlenecks that you might have inside of your network all right so let's get
going so that would be ping and this is how pen testers are able to see if there's anything out
there sometimes servers do have ping restrictions so you can ping them so you have to use nmap with
uh without ping right so what is the name the most common what is the name of the most common
tool for finding open ports on the Target and that one is easy very very very popular tool and map so
um we're going to put end mapping here that and that what service do we identify on Port
23 so now again networking you need to know your networking ports right so uh each port
and obviously this is going to detail net uh Port 23 you know we have 21 which is uh FTP
22 uh you know that's SSH and then Port 80 hdp Port 443 which is atps and and so on and
it goes on and on right so most common ports are you know anything that is 10 24 so 1024
um and then down those are all the most common ports in the IC TCP IP right so Let's uh let's
check that out so we're gonna go uh let me just do a souk here and I'm going to launch and map
and I'm going to do I don't know why sometimes uh you know pen testers they go with a full gamut
right away I like to just go very easy and let's see no pinging here and launch this and map fast
so the first 100 Port so minus F will give you the the one first 100 ports if you do for example
something like uh SS like that then that will be the first 1000 TCP ports that you can do 1000 uh
UDP ports uh or you can also do for example a which is everything everything with uh Port let's
say 80 like that right if you put a minus in here like this then you're checking every single port
um out there and uh you can also do for example things like uh SV for chicken diversion and then
the OS like that you can put a v here for Verve bows for example so you can do many things with
nmap you can see here that Port 23 is telnet right so if we go here let's answer this telnet is the
most insecure port in the world it's been around since the 1980s and it's definitely deprecated so
you should never use telnet what username is able to log into the target when you do telnet and it's
got a t at the very end so this one is easy to guess right so it should be something like root
right so let's try root perfect so that worked and now let's submit the flag so for that we just have
to look into our telnet right so again I'm going to copy that IP address in there and I'm going
to clear this like that and then telnet and the IP address so we are connected hack the Box meow
login and password press OK meow login so with no is root like that right and we're already in so no
password on it right for telnet Let's see we do a man telnet see what we get this is the manual for
telnet so all the commands that you can launch on telnet and yeah so Q for quit now let's grab
that lag so the way you do it is you can do an LS right so and then you can see two things you see a
folder called Snap then you see the flag in there we can cut the flag so let's get the flag the
XT and there it is perfect so let's copy that Ctrl shift and then C will copy from the terminal
and let's put this in here like that there and we Pawn the first hack the Box Box Lab which is meow
[Music]
foreign