Phoenix Computing Solutions Security engineering, research, and resilient infrastructure

Mirai

Hack The Box · Easy Linux Box · Retired

Release Date01 Sep 2017
Retire Date10 Feb 2018
DifficultyEasy - Retired [0]
CreatorArrexel
CherryTree FileMirai.ctb.txt

Enumeration

Nmap exposed SSH, DNS, and a Lighttpd web service. Gobuster discovered /admin and /versions; the admin page revealed a Pi-hole installation.

22/tcp open ssh
53/tcp open domain
80/tcp open http lighttpd 1.4.35
Mirai Pi-hole administration page

Initial Access

The target was a Raspberry Pi that still used the default credentials. SSH access succeeded with pi:raspberry.

Privilege Escalation

The pi account had broad sudo rights, allowing a root shell. The root flag had been removed from its expected location, but a note identified the USB device that previously held it. Recovering the deleted data from that device produced the flag.