Skip to content

Latest commit

 

History

History

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
 
 

ssh-keyz

Points: 150

Category

General Skills

Question

As nice as it is to use our webshell, sometimes its helpful to connect directly to our machine. To do so, please add your own public key to ~/.ssh/authorized_keys, using the webshell. The flag is in the ssh banner which will be displayed when you login remotely with ssh to with your username.

Hint

key generation tutorial

We also have an expert demonstrator to help you along. link

Solution

Add your public key to ~/.ssh/authorized_keys. You can generate an RSA key by doing ssh-keygen -t rsa.

Public key by default stored at ~/.ssh/id_rsa.pub.

Connect to web shell by doing ssh <username>@2018shell1.picoctf.com

$ ssh [email protected]
The authenticity of host '2018shell1.picoctf.com (18.223.208.176)' can't be established.
ECDSA key fingerprint is SHA256:zCX5ip3tx1RMbsJBc70jEazd+gAFzlbC1Q2iDI8LA/k.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '2018shell1.picoctf.com,18.223.208.176' (ECDSA) to the list of known hosts.
picoCTF{who_n33ds_p4ssw0rds_38dj21}
...
...
...

Flag

picoCTF{who_n33ds_p4ssw0rds_38dj21}