$$ RED36/RED37 $$

Download the VM Here

First Steps:

• Before you power it on, go to the machine settings and give the network adapter a custom MAC address.

  • This way you will be able to locate it with the arp-scan utility within Kali.
  • Don’t use the MAC address I have below. Everyone in the class needs something different.
    • Manually randomize the MAC Address you give your machine or leave it alone and just copy it. (You’ll need it for the next step.)

  

Once you have started the CTF machine, launch a root shell in Kali and do the following:

• use the *arp-scan* utility to scan the entire subnet and report back on MAC addresses that are present.
  • Your Kali Linux machine must be on the same subnet as the CTF machine.
• Use grep to filter for the MAC address you gave the CTF Machine.
• NOTE: I only grep for the OUI of the MAC address. You should grep for the entire MAC Address.
  • Use all 6 Hex characters in your grep

An nmap of the target shows port 2222 is open

• Port 2222 will be the port used for SSH on all nodes.

Topology:

• Here is a graphic that shows the topology we’ll be pivoting into.

Kali:

• IP Address: YOUR_IP

HOP1:

• IP: Discovered IP Address on your Local Subnet
• IP: 172.5.0.5
• Service Running: SSH