$$ \text {Red14} $$

• The VM needed for this challenge can be downloaded here.
• You’ll need Kali Linux as well.
• The final flag for this machine is in a /root folder and is called Flag.txt

First Steps:

• You will not have the login credentials to the machine.

• Before you power it on, go to the machine settings and give the network adapter a custom MAC address.

  • This way you will be able to locate it with the arp-scan utility within Kali.
  • Don’t use the MAC address I have below. Everyone in the class needs something different.
    • Manually randomize the MAC Address you give your machine!

  

Once you have started the CTF machine, pull up a root shell on Kali and do the following:

• use the *arp-scan* utility to scan the entire subnet and report back on MAC addresses that are present.
  • Your Kali Linux machine must be on the same subnet as the CTF machine.
• Use grep to filter for the MAC address that you gave the CTF Machine.
• NOTE: I only grep for the OUI of the MAC address. You should grep for the entire MAC Address!

  • Use all 6 Hex characters in your grep

  • Not sure what this command is doing? —Ask ChatGPT? Slow down and ask questions. (No need to rush)

    

NMAP Results

This time we have:

• 22: SSH
• 53: Bind9
• 80: HTTP

Go to the webpage first:

• My VM is on the IP Address 192.168.228.39
• We’ll catch an immediate 301 redirect to http://prod.icsi.vuln