FunboxEasyEnum_Lateral_Movement_karla

karla

---

The credential of the karla user has been identified

┌──(kali㉿kali)-[~/PEN-200/PG_PLAY/funboxeasyenum]
└─$ sshpass -p 'tgbzhnujm!' ssh karla@$IP                                      
Welcome to Ubuntu 18.04.5 LTS (GNU/Linux 4.15.0-117-generic x86_64)
 
 * Documentation:  https://help.ubuntu.com
 * Management:     https://landscape.canonical.com
 * Support:        https://ubuntu.com/advantage
 
 System information disabled due to load higher than 1.0
 
 
 * Canonical Livepatch is available for installation.
   - Reduce system reboots and improve kernel security. Activate at:
     https://ubuntu.com/livepatch
 
0 packages can be updated.
0 updates are security updates.
 
Failed to connect to https://changelogs.ubuntu.com/meta-release-lts. Check your Internet connection or proxy settings
 
 
To run a command as administrator (user "root"), use "sudo <command>".
See "man sudo_root" for details.
 
karla@funbox7:~$ whoami
karla
karla@funbox7:~$ hostname
funbox7
karla@funbox7:~$ ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
3: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether 00:50:56:9e:db:3c brd ff:ff:ff:ff:ff:ff
    inet 192.168.187.132/24 brd 192.168.187.255 scope global ens192
       valid_lft forever preferred_lft forever

Lateral Movement made to the karla user