Skip to content

Latest commit

 

History

History
17 lines (17 loc) · 699 Bytes

l20.md

File metadata and controls

17 lines (17 loc) · 699 Bytes

Level 20

ssh command connects to the server
We set up a server side listener using nc at some port which sends current password on connection
Then we log in using another terminal and use suconnect command to establish connection to the same port

Commands-

ssh [email protected] -p 2220
echo "VxCazJaVykI6W36BkBU0mJTCM8rR95XT" | nc -l -p 10000 This command creates server side listener that sends the current password to the connector once connection is established

On another terminal
ssh [email protected] -p 2220
./suconnect 10000
This gives us the flag

Flag - NvEJF7oVjkddltPSrdKEFOllh9V1IBcq