Resource_Lateral_Movement_Docker_msainristil

msainristil

---

Validating the credential of the msainristil user against the target SSH server

┌──(kali㉿kali)-[~/…/htb/labs/resource/uploads]
└─$ ssh msainristil@$IP             
msainristil@10.10.11.27's password: 82yards2closeit
Linux itrc 5.15.0-117-generic #127-Ubuntu SMP Fri Jul 5 20:13:28 UTC 2024 x86_64
 
The programs included with the Debian GNU/Linux system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.
 
Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
permitted by applicable law.
Last login: Sun Aug  4 17:31:54 2024 from 10.10.16.67
msainristil@itrc:~$ whoami
msainristil
msainristil@itrc:~$ hostname
itrc
msainristil@itrc:~$ /usr/sbin/ifconfig 
eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 172.223.0.3  netmask 255.255.0.0  broadcast 172.223.255.255
        ether 02:42:ac:df:00:03  txqueuelen 0  (Ethernet)
        RX packets 18098712  bytes 1707931247 (1.5 GiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 14863728  bytes 2579077685 (2.4 GiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
 
lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536
        inet 127.0.0.1  netmask 255.0.0.0
        loop  txqueuelen 1000  (Local Loopback)
        RX packets 302379  bytes 18019146 (17.1 MiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 302379  bytes 18019146 (17.1 MiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

Lateral Movement made to the msainristil user via SSH