LINUX SSH

[johnnyleano69]

I'm trying to gain some insight to what i need to do to complete this challenge I've tried looking most places but no luck.

Basically im in a restricted shell environment that looks l like this:

I type in "ls"

then i type "ls -a" 

then the "   .secret-files   " comes up and i am confused on how to access them since in a restricted shell you cant use the more common commands to access files on it 

 

 

 

 

                          

[Guest]

What are you trying to do?

whats in .secret-files?     ls -a .secret-files

Whats in the parent directory? ls -a ..

 

Are more commands made available to you? As commands can be added to a restricted shell.

You should be able to run sh. If any shell files are provided they can be executed as normal.

slashes are typically allowed for ls and sh.

[johnnyleano69]

Well its challenge for CyberStart.com something i signed up for to practice Cyber Security. It's asking me to look inside the flies and find a code but I've tried every open and bash command i think of and look up 

But what other information can i give you or what commands should i run  to be able to better help you understand my situation 

 

[Guest]

Use "cat dir/file | less" to view the contents of files. press q to exit.

[johnnyleano69]

17 minutes ago, Nayr438 said:

Use "cat dir/file | less" to view the contents of files. press q to exit.

It did not allow me to use that command 

Actually i think in this restricted shell the cat command is disabled 

[Guest]

what about

• while read -r line; do echo "$line"; done <"dir/file"

[johnnyleano69]

4 hours ago, Nayr438 said:

what about

• while read -r line; do echo "$line"; done <"dir/file"

That one did not work either 

[throttlemeister]

Why are you asking for precooked answer when you are trying to achieve something? The whole point of exercises like this is to learn something. What exactly are you going to lean from somebody else doing the work for you? Exactly zip, nada, nothing. This is not rocket science and there are multiple clues provided in the limited information you posted. I'm sure there are more in the stuff you didn't post. Read it, digest it, read it again if need be, experiment and learn. You'll figure it out. But please don't go asking others to solve your tasks for you. Keep in mind that the more you need to think to solve a problem, the more you are actually learning. You don't learn from easy questions that take no effort to solve.

[johnnyleano69]

1 minute ago, throttlemeister said:

Why are you asking for precooked answer when you are trying to achieve something? The whole point of exercises like this is to learn something. What exactly are you going to lean from somebody else doing the work for you? Exactly zip, nada, nothing. This is not rocket science and there are multiple clues provided in the limited information you posted. I'm sure there are more in the stuff you didn't post. Read it, digest it, read it again if need be, experiment and learn. You'll figure it out. But please don't go asking others to solve your tasks for you. Keep in mind that the more you need to think to solve a problem, the more you are actually learning. You don't learn from easy questions that take no effort to solve.

look i apologize if i made you upset but im trying to be pointed in the right direction and i wouldnt be on the internet asking folks for help if the hint didnt say "google it " 

i have solved every challenge on my own but this one has me stumped i just started studying this field and would like a little guidance. I tried looking for stuff on google but that is no where near any help 

[throttlemeister]

2 hours ago, johnnyleano69 said:

look i apologize if i made you upset but im trying to be pointed in the right direction and i wouldnt be on the internet asking folks for help if the hint didnt say "google it " 

i have solved every challenge on my own but this one has me stumped i just started studying this field and would like a little guidance. I tried looking for stuff on google but that is no where near any help 

I don't get upset by internet discussions.  InfoSec requires you to learn to think outside the box every time or you are not going anywhere. And using Google to find an information to come to an answer is not the same as going on a forum and asking for a solution. Sorry.

 

Personally I would start with vi, however since cat appears to be disabled (which rbash doesn't btw, so your environment is more restricted than just rbash) you may find that not working also. However, if you read what you posted, rbash does allow you to run scripts without restrictions. Which also happens to be one of rbash greatest downsides. One that would happily be exploited by nefarious souls wanting to look at stuff they shouldn't be.

[johnnyleano69]

56 minutes ago, throttlemeister said:

I don't get upset by internet discussions.  InfoSec requires you to learn to think outside the box every time or you are not going anywhere. And using Google to find an information to come to an answer is not the same as going on a forum and asking for a solution. Sorry.

 

Personally I would start with vi, however since cat appears to be disabled (which rbash doesn't btw, so your environment is more restricted than just rbash) you may find that not working also. However, if you read what you posted, rbash does allow you to run scripts without restrictions. Which also happens to be one of rbash greatest downsides. One that would happily be exploited by nefarious souls wanting to look at stuff they shouldn't be.

Okay you're right thanks for your input