diff --git a/level01/README.mdx b/level01/README.mdx index 5cf3aae..4a6a8be 100644 --- a/level01/README.mdx +++ b/level01/README.mdx @@ -1,10 +1,14 @@ # Level 01 - solution +- use token `x24...` from the last level + ``` $ su level01 $ Password: x24ti5gi3x0ol2eh4esiuxias ``` -- take a look at the legacy `/etc/passwd` + +- take a look at legacy folder `/etc/passwd` + ``` $ cat /etc/passwd $ cat /etc/passwd | grep -i flag01 | awk -F: '{print $2}' @@ -13,7 +17,7 @@ $ cat /etc/passwd | grep -i flag01 | awk -F: '{print $2}' 😀 if we have john we'll able to do: $ john --show <(cat /etc/passwd | grep -i flag01 | awk -F: '{print $2}') ``` -- on host: +- get and use `john` on host: ``` $ wget https://download.openwall.net/pub/projects/john/contrib/macosx/john-1.8.0.9-jumbo-macosx_sse4.zip $ tar -xvf john-1.8.0.9-jumbo-macosx_sse4.zip @@ -30,5 +34,5 @@ Password: abcdefg # Level 01 - token ```r -x24ti5gi3x0ol2eh4esiuxias +f2av5il02puano7naaf6adaaf ```