$$ Red39 $$

• The VM needed for this challenge can be downloaded here.
  • The unzip password is: RED39
• You’ll need Kali Linux.

Lab Objectives:

• We’ll exploit the target VM first
• This will give us the information we need to access the second machine.
• NOTE: The second machine is on the iCSI Cyber Range. The second machine can only be accessed at iCSI.

First Steps:

• You will not have the login credentials to the machine.

• Before you power it on, go to the machine settings and give the network adapter a custom MAC address.

  • This way you will be able to locate it with the arp-scan utility within Kali.
  • Don’t use the MAC address I have below. Everyone in the class needs something different.
    • Manually randomize the MAC Address you give your machine!

  

Once you have started the CTF machine, launch a root shell in Kali and do the following:

• use the *arp-scan* utility to scan the entire subnet and report back on MAC addresses that are present.
  • Your Kali Linux machine must be on the same subnet as the CTF machine.
• Use grep to filter for the MAC address that you gave the CTF Machine.
• NOTE: I only grep for the OUI of the MAC address. You should grep for the entire MAC Address!
  • Use all 6 Hex characters in your grep

An initial Nmap shows that we have a Domain Controller running a web server on Port 80 alongside several other services.

Click on ‘Register here’ after going to the webpage to register an account.

The username and password you pick aren’t important, but you’ll need to remember them to log in later.