[QUESTION] password of machine 2 in scan project

[kill-ux]

you don't mention the password of the machine 2 in the subject of subjects/scan project

[pedrodesu]

Hello @kill-ux!

You are right that the password for 01_scan_RRF-CONTROL isn't listed! However, that is by design.

While you have SSH access to the laptop to start your work, your mission is to 'find a way in' to the server. Providing a password would defeat the purpose of the scanning and discovery phase.

Use the tools mentioned (like nmap and arp-scan) to identify what services are running on that machine once you find it. Look for any 'open doors' that don't require a password, or services that might be vulnerable. The 'RRF-CONTROL>' prompt is your reward for finding that entry point.

Please let me know if I missed something.

[oriax11]

Not really there is no vulnerable services
the password is in the subject
you just need to read it carefully.

[kill-ux]

Hello @kill-ux!

You are right that the password for 01_scan_RRF-CONTROL isn't listed! However, that is by design.

While you have SSH access to the laptop to start your work, your mission is to 'find a way in' to the server. Providing a password would defeat the purpose of the scanning and discovery phase.

Use the tools mentioned (like nmap and arp-scan) to identify what services are running on that machine once you find it. Look for any 'open doors' that don't require a password, or services that might be vulnerable. The 'RRF-CONTROL>' prompt is your reward for finding that entry point.

Please let me know if I missed something.

Hello @pedrodesu
yeah you are write but when we found the IP and ssh open port we found that the machine need a password
"i see in the image of the subject has a password in it" but if the password is needed so the subject must mention it or if we don't need it so the machine need to change to open it without a password and thanks for time.

[oriax11]

"i see in the image of the subject has a password in it" but if the password is needed so the subject must mention it or if we don't need it so the machine need to change to open it without a password and thanks for time.

the objective of the project is for you to feel like discovering and mapping a network and trying to get access to the machine
the password not being given explicitly is just be design as one of the first to complete that project
it was fun for me to get stuck at the password part
agin if you have clearly given the password you will not wait for the nmap part nor trying figuring out the ip address of the host using arp scan
you can directly log in to the machine and type ip a lol and get the port the service is runnign on that would ruin the subject
so again "it is by design".
it is not a mistake.

[kill-ux]

"i see in the image of the subject has a password in it" but if the password is needed so the subject must mention it or if we don't need it so the machine need to change to open it without a password and thanks for time.

the objective of the project is for you to feel like discovering and mapping a network and trying to get access to the machine the password not being given explicitly is just be design as one of the first to complete that project it was fun for me to get stuck at the password part agin if you have clearly given the password you will not wait for the nmap part nor trying figuring out the ip address of the host using arp scan you can directly log in to the machine and type ip a lol and get the port the service is runnign on that would ruin the subject so again "it is by design". it is not a mistake.

no that's not the subject because will not use nmap and tols you enter directly so its bad to find the passwword dirctly

i think the best idea is to make a crepted password by the ip and port and after found the ip+port you can decrept the password and use the real password with ssh