Home Hackvent 2017 Hidden ball 5:
Writeup
Cancel

Hidden ball 5:

Solution

we scan the challenge server for open ports

1
2
3
4
5
6
7
8
9
10
11
12
13
14
$ nmap challenges.hackvent.hacking-lab.com

Starting Nmap 7.01 ( https://nmap.org ) at 2017-12-06 22:59 CET
Nmap scan report for challenges.hackvent.hacking-lab.com (80.74.140.188)
Host is up (0.56s latency).
rDNS record for 80.74.140.188: urb80-74-140-188.ch-meta.net
Not shown: 996 filtered ports
PORT    STATE  SERVICE
22/tcp  open   ssh
23/tcp  open   telnet
80/tcp  closed http
443/tcp closed https

Nmap done: 1 IP address (1 host up) scanned in 67.94 seconds

so, there’s a telnet service running, we connect, and are greeted by Santa:

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
$ telnet challenges.hackvent.hacking-lab.com

__.----.
              _.'        '-.
             /    _____     '-.
            /_.-""     ""-._   \                 HO, HO, HO...
           ."   _......._   ".  \
           ; .-' _ ))) _ '-. ;   |
           '/  ." _   _ ".  \'.  /
           _|  .-.^ ) ^.-.  |_ \/-.
           \ '"==-.(_).-=="' //    \
            '.____.-^-.____.' \    /
             |    ( - )   |   '--'
              \           /
      _________\_________/_______________________________________________

He keeps talking for a minute, and then gives us the flag

Flag

HV17-UH4X-PPLE-ANND-IH4X-T1ME