$$ RED28 $$

• The VM needed for this challenge can be downloaded here.
• You’ll need Kali Linux.

First Steps:

• You will not have the login credentials to the machine.

• Before you power it on, go to the machine settings and give the network adapter a custom MAC address.

  • This way you will be able to locate it with the arp-scan utility within Kali.
  • Don’t use the MAC address I have below. Everyone in the class needs something different.
    • Manually randomize the MAC Address you give your machine!

  

Once you have started the CTF machine, launch a root shell in Kali and do the following:

• use the *arp-scan* utility to scan the entire subnet and report back on MAC addresses that are present.
  • Your Kali Linux machine must be on the same subnet as the CTF machine.
• Use grep to filter for the MAC address that you gave the CTF Machine.
• NOTE: I only grep for the OUI of the MAC address. You should grep for the entire MAC Address!
  • Use all 6 Hex characters in your grep

Start with an Nmap:

Simple Enough: We have an Apache2 web server on port 80 that appears to redirect to the domain symzip.local.

If you test it out in Firefox, you’ll see that the web server does indeed redirect us to symzip.local.

Add the following line to your /etc/hosts file on Kali. Be sure to replace the IP Address of the web server with the actual IP address you identified at the beginning of the lab.

pico /etc/hosts

Save /etc/hosts, refresh the webpage, and you’ll see the landing page below: