Underthewire Century 1->2 Write Up

Hello World, today we will crack underthewire Century 1->2 .

Level Objective:??? ???? ???? ???? ???? ???? ???? ???? ???? ???? Getting password for Century2.

PowerShell concept discussed: Automatic variables

Hint:??? ???? ???? ???? ???? ???? ???? ???? ???? ???? ???? ???? The password is the?build version?of the instance of PowerShell installed on this system.? ?

N.B.??? ???? ???? ???? ???? ???? ???? ???? ???? ???? ???? ???? The?build version?of the PowerShell is found in the variable called?$PSVersionTable. It is among one of PowerShell’s automatic variables which store state information.

Getting Started:??? ???? ???? ???? ???? ???? ???? ???? ???? ???? We have got initial credentials from underthewire’s slack channel and successfully connected to their server at Century0->1. Now using the command?$PSVersionTable, we will get the?build version?of PowerShell and other additional version related information.? ?

Steps:

1. Make sure you are connected to the server using credentials from?century0–>1.

2. From the path?C:\users\century1\desktop?run the command?$PSVersionTable.?Your terminal should look like something like this:? ?

PS C:\users\century1\desktop> $PSVersionTable
Name                           Value
----                           -----
PSVersion                      5.1.14393.4583
PSEdition                      Desktop
PSCompatibleVersions           {1.0, 2.0, 3.0, 4.0...}
BuildVersion                   10.0.14393.4583
CLRVersion                     4.0.30319.42000
WSManStackVersion              3.0
PSRemotingProtocolVersion      2.3
SerializationVersion           1.1.0.1        

3. The?password?for century2 is the BuildVersion which is?10.0.14393.4583 4. Open another terminal and run the following ssh command and enter the password we got above when prompted.

ssh [email protected] -p 22        

If your current path is changed to?PS C:\users\century2\desktop>?then congrats! you got it right!

After non-commercial break we will proceed to Century2->3.

Till then, keep learning and getting your hands dirty!

Resources:

1.?underthewire.tech/century-1

2.?https://ss64.com/ps/syntax-automatic-variables.html

3.?https://docs.microsoft.com/en-us/powershell/scripting/learn/ps101/01-getting-started?view=powershell-7.2

If you enjoy this kind of stuff, we can be friends on:?https://medium.com/@security_boy