SSH
Validating the credential of the webadmin
user against the target SSH server
┌──(kali㉿kali)-[~/PEN-200/PG_PLAY/potato]
└─$ ssh webadmin@$IP
The authenticity of host '192.168.120.101 (192.168.120.101)' can't be established.
ED25519 key fingerprint is SHA256:9DQds4tRzLVKtayQC3VgIo53wDRYtKzwBRgF14XKjCg.
This key is not known by any other names.
Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
Warning: Permanently added '192.168.120.101' (ED25519) to the list of known hosts.
webadmin@192.168.120.101's password: dragon
Welcome to Ubuntu 20.04 LTS (GNU/Linux 5.4.0-42-generic x86_64)
* Documentation: https://help.ubuntu.com
* Management: https://landscape.canonical.com
* Support: https://ubuntu.com/advantage
System information as of Sun 27 Apr 2025 04:36:54 PM UTC
System load: 0.08 Processes: 151
Usage of /: 12.4% of 31.37GB Users logged in: 0
Memory usage: 30% IPv4 address for ens192: 192.168.120.101
Swap usage: 0%
118 updates can be installed immediately.
33 of these updates are security updates.
To see these additional updates run: apt list --upgradable
The list of available updates is more than a week old.
To check for new updates run: sudo apt update
The programs included with the Ubuntu system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.
Ubuntu comes with ABSOLUTELY NO WARRANTY, to the extent permitted by
applicable law.
webadmin@serv:~$ whoami
webadmin
webadmin@serv:~$ hostname
serv
webadmin@serv:~$ ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
3: ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/ether 00:50:56:9e:ea:70 brd ff:ff:ff:ff:ff:ff
inet 192.168.120.101/24 brd 192.168.120.255 scope global ens192
valid_lft forever preferred_lft forever
Initial Foothold established to the target system as the webadmin
user via SSH