GlasgowSmile_Abnerineedyourhelp

Abnerineedyourhelp

---

Upon making the lateral movement to the rob user, an interesting file has been located in the user’s home directory.

rob@glasgowsmile:~$ cat Abnerineedyourhelp
Gdkkn Cdzq, Zqsgtq rteedqr eqnl rdudqd ldmszk hkkmdrr ats vd rdd khsskd rxlozsgx enq ghr bnmchshnm. Sghr qdkzsdr sn ghr eddkhmf zants adhmf hfmnqdc. Xnt bzm ehmc zm dmsqx hm ghr intqmzk qdzcr, "Sgd vnqrs ozqs ne gzuhmf z ldmszk hkkmdrr hr odnokd dwodbs xnt sn adgzud zr he xnt cnm's."
Mnv H mddc xntq gdko Zamdq, trd sghr ozrrvnqc, xnt vhkk ehmc sgd qhfgs vzx sn rnkud sgd dmhflz. RSLyzF9vYSj5aWjvYFUgcFfvLCAsXVskbyP0aV9xYSgiYV50byZvcFggaiAsdSArzVYkLZ==
rob@glasgowsmile:~$ ll Abnerineedyourhelp
4.0K -rw-r----- 1 rob rob 454 Jun 14  2020 Abnerineedyourhelp

The Abnerineedyourhelp file contains what appears to be a cipher text. Based on the filename, this might have to do with the abner user. Possibly the Caesar cipher.

Caesar cipher

---

It was indeed the Caesar cipher with a single backward shift.

Hello Dear, Arthur suffers from severe mental illness but we see little sympathy for his condition. This relates to his feeling about being ignored. You can find an entry in his journal reads, "The worst part of having a mental illness is people expect you to behave as if you don't."
Now I need your help Abner, use this password, you will find the right way to solve the enigma. STMzaG9wZTk5bXkwZGVhdGgwMDBtYWtlczQ0bW9yZThjZW50czAwdGhhbjBteTBsaWZlMA==

Decipher text reveals a possible base64-encoded password of the abner user.

Decoding

---

┌──(kali㉿kali)-[~/PEN-200/PG_PLAY/glasgowsmile]
└─$ echo 'STMzaG9wZTk5bXkwZGVhdGgwMDBtYWtlczQ0bW9yZThjZW50czAwdGhhbjBteTBsaWZlMA==' | base64 -d
I33hope99my0death000makes44more8cents00than0my0life0                                                                                                                                        

The decoded password is I33hope99my0death000makes44more8cents00than0my0life0. Testing it against the target SSH server.