Recon

The first step to pwn the machine is te recon, we launch a nmap scan, I prefer to export the nmap scan to an grepeable file to have a order in the content but is not necessary.

Next I use a script in bash devolped by s4vitar and re run a nmap scan but with other parameters to know the service and version that running on the port.

An re run the scan with the following parameters:

We found Port 23 Open and running Telnet on it.

We attemp a session with Telnet:

Try with common users:

And the correct user in this case is root

First, when you enter to a machine is know who you are with the command whoami:

You are the user root, let see in what directory are you are:

The last thing is print the flag with the command cat:

And Congratulations! You have pwned your First Machine.

Summary

This machine is very easy, good for people new in hacking you learn about a missconfiguration in an insecure protocol like Telnet and how to recognize the services and ports .