SSH


Testing the credential found from the earlier SNMP enumeration

┌──(kali㉿kali)-[~/archive/htb/labs/pandora]
└─$ ssh daniel@panda.htb  
The authenticity of host 'panda.htb (10.10.11.136)' can't be established.
ed25519 key fingerprint is sha256:yDtxiXxKzUipXy+nLREcsfpv/fRomqveZjm6PXq9+BY.
This key is not known by any other names.
Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
warning: Permanently added 'panda.htb' (ED25519) to the list of known hosts.
daniel@panda.htb's password: 
Welcome to Ubuntu 20.04.3 LTS (GNU/Linux 5.4.0-91-generic x86_64)
 
 * documentation:  https://help.ubuntu.com
 * management:     https://landscape.canonical.com
 * support:        https://ubuntu.com/advantage
 
  system information as of thu 20 apr 08:26:27 UTC 2023
 
  system load:           0.48
  usage of /:            65.1% of 4.87GB
  memory usage:          12%
  swap usage:            0%
  processes:             320
  users logged in:       0
  ipv4 address for eth0: 10.10.11.136
  ipv6 address for eth0: dead:beef::250:56ff:feb9:364
 
  => /boot is using 91.8% of 219MB
 
 
0 updates can be applied immediately.
 
 
The list of available updates is more than a week old.
to check for new updates run: sudo apt update
 
 
The programs included with the Ubuntu system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.
 
Ubuntu comes with ABSOLUTELY NO WARRANTY, to the extent permitted by
applicable law.
 
daniel@pandora:~$ whoami
daniel
daniel@pandora:~$ hostname
pandora
daniel@pandora:~$ ifconfig
eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 10.10.11.136  netmask 255.255.254.0  broadcast 10.10.11.255
        inet6 dead:beef::250:56ff:feb9:364  prefixlen 64  scopeid 0x0<global>
        inet6 fe80::250:56ff:feb9:364  prefixlen 64  scopeid 0x20<link>
        ether 00:50:56:b9:03:64  txqueuelen 1000  (Ethernet)
        RX packets 1047456  bytes 157131356 (157.1 MB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 1111578  bytes 954045011 (954.0 MB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
 
lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536
        inet 127.0.0.1  netmask 255.0.0.0
        inet6 ::1  prefixlen 128  scopeid 0x10<host>
        loop  txqueuelen 1000  (Local Loopback)
        RX packets 3813  bytes 333700 (333.7 KB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 3813  bytes 333700 (333.7 KB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

It was a valid system credential Initial Foothold established to the target system as the daniel user via SSH