I've had a lot going on for the last two weeks. I was on call the first week and got paged 3-4 times per night. I had been intending on posting but got a staph infection and the antibiotics have been brutalizing me. Even worse, the antibiotics seemed to have caused me to get athletes foot on my left foot. It has been an awesome experience as you can imagine.
With all of that going on I have just been uninspired and stressed out. It really put me in a funk and just made me want to sit on the couch doing nothing. I have spent the majority of my time not working on projects and binge watching tv shows on Netflix. And playing around a bit with my retropie.
Today I realized I have wasted almost two weeks of time because of being sick and unmotivated. Which really lit a fire under me because I have been making such an effort to be on the ball and get stuff done. I got my list out and went through it to see what I would attempt to work on tonight. I decided that I would continue on with some CTF challenges.
For the last 3 to 4 hours I have been rooting servers. Surprisingly I got root on two servers. The first one wasn’t very difficult. The challenge required me to login to an admin panel with some SQL injection and allowed me to download an SSH key for a user. Once logged in I found a vulnerable backup script that allowed me to grab the root flag.
The second one was more challenging, but I think that it was more challenging because for some reason my POST requests in Burp weren’t getting received correctly and my reverse shell wouldn’t activate. Once I got the reverse shell up and running it was pretty easy. I enumerated and saw that /etc/passwd was world writable. So I created a new user and gave it root. Su user and then cat /root/root.txt.
Overall I am pretty happy with the work. I definitely learned a few things. I’m going to continue on tomorrow and work on some more.
Another thing that I realized tonight is that I am eating/drinking entirely too much sugar. I drank at least 4 Dr. Peppers tonight and had 4 or 5 slices of pizza. I think I am going to try and dial back the sugar intake. Maybe cut out soda entirely if possible. (Going to need to wean myself off to avoid headaches.) But I think there are good things ahead. I am feeling like I am almost ready for the OSCP. We’ll see what happens over the next month or so.