8025_owasp

try to get familiar with the operation system, as it is not a standard variant (uname -a shows Linux trytohack 2.6.9-1.667smp #1 SMP Tue Nov 2 14:59:52 EST 2004 i686)
- (interestingly uname is not actually a known command)
- entering help results in a list of possible commands:
```
  ls
  whoami
  id
  help
  su
```
whoami results in apache
su results in a prompt for username and password
- root:root and root:toor do not work
ls results in the directory structure:
```
  index.php
  4admin0Nly.jpg
```

as the machine is a webserver, download the image curl -O http://hackademics.hacking-lab.com/ch008/4admin0Nly.jpg

the jpg file is obviously not real picture, accessing it with an editor shows the content:

2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d
20 55 73 65 72 6e 61 6d 65 3a 20 73 75 70 65 72 61 64 6d 69 6e 20 50 61 73 73 77 6f 72 64 3a 20 30 77 40 73 70 55 53 41 79 30 20
2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d

decoding this results in -------------------------------------------- Username: superadmin Password: 0w@spUSAy0 --------------------------------------------

su with the given credentials results in the challenge to be completed (see 8025_1.png)

8025 OWASP Hackademic Challenge 8

attack: