🖼 Scenario

We are engaged in a black box test of the subnet: 172.16.64.0/24

Find the flag on each machine.

Some remote code execution is required.

Some machines are instantly exploitable and some will require exploiting other ones first to get valuable info to move forward.

Move on to the next one if stuck.

Read the flag file and make sure to look for other important information as well.

📊 Goals

✔️ Discover and exploit all machines on the network

✔️ Read all the flag files (one per machine, stored in file systems or database)

✔️ Obtain root privileges on both machines (meterpreter's autoroute functionality and ncrack's minimal.usr list will prove useful)

🧠 What you will learn

☑️ Network discovery

☑️Pivoting to other networks

☑️Basic privilege escalation

🧰 Tools