Points: 150
General Skills
As nice as it is to use our webshell, sometimes its helpful to connect directly to our machine. To do so, please add your own public key to ~/.ssh/authorized_keys, using the webshell. The flag is in the ssh banner which will be displayed when you login remotely with ssh to with your username.
key generation tutorial
We also have an expert demonstrator to help you along. link
Add your public key to ~/.ssh/authorized_keys. You can generate an RSA key by doing ssh-keygen -t rsa
.
Public key by default stored at ~/.ssh/id_rsa.pub.
Connect to web shell by doing ssh <username>@2018shell1.picoctf.com
$ ssh [email protected]
The authenticity of host '2018shell1.picoctf.com (18.223.208.176)' can't be established.
ECDSA key fingerprint is SHA256:zCX5ip3tx1RMbsJBc70jEazd+gAFzlbC1Q2iDI8LA/k.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '2018shell1.picoctf.com,18.223.208.176' (ECDSA) to the list of known hosts.
picoCTF{who_n33ds_p4ssw0rds_38dj21}
...
...
...
picoCTF{who_n33ds_p4ssw0rds_38dj21}