feat: found the exploit in the code and attaced the server
This commit is contained in:
@@ -0,0 +1,5 @@
|
|||||||
|
The Code uses unsalted hashes of the passwords.
|
||||||
|
That way there is no random data added to the hashes and it is very easy to find identical hashes using
|
||||||
|
pre-computed lookup tables.
|
||||||
|
|
||||||
|
Using such a tool we found that the password admin123 has the same hash that is stored for the username admin.
|
||||||
@@ -0,0 +1,77 @@
|
|||||||
|
07:46:38 leo@group-20 ~ → cat .ssh/config
|
||||||
|
Host chocolate
|
||||||
|
User chocolate
|
||||||
|
Hostname 10.42.23.1
|
||||||
|
|
||||||
|
07:46:13 leo@group-20 ~ → ssh chocolate
|
||||||
|
chocolate@10.42.23.1's password: chocolate
|
||||||
|
Chocolate Factory SCADA Command Line Interface v2.2.144
|
||||||
|
|
||||||
|
Please, enter your authentication credentials.
|
||||||
|
|
||||||
|
> Username: admin
|
||||||
|
> Password: admin123
|
||||||
|
|
||||||
|
Welcome admin!
|
||||||
|
|
||||||
|
We are currently clean on OPSEC.
|
||||||
|
|
||||||
|
Current System Status:
|
||||||
|
🏭 Production Line 1: [🟢 ONLINE] - Idle
|
||||||
|
🏭 Production Line 2: [🟢 ONLINE] - Running (Secretly Sweet Chocolate Batch #42)
|
||||||
|
🏭 Ingredient Hopper (Cocoa): [🟢 ONLINE] - Level: 85%
|
||||||
|
🏭 Ingredient Hopper (Sugar): [🟢 ONLINE] - Level: 92%
|
||||||
|
🏭 Ingredient Hopper (Milk Powder): [🟢 ONLINE] - Level: 78%
|
||||||
|
🌡️ Temperature Control System: [🟢 ONLINE] - Target: 45°C (±0.5°C)
|
||||||
|
⚙️ Mixing Unit A: [🟢 ONLINE] - Standby
|
||||||
|
⚙️ Mixing Unit B: [🟢 ONLINE] - Active
|
||||||
|
🍫 Molding Machine Alpha: [🟢 ONLINE] - Ready
|
||||||
|
🍫 Molding Machine Beta: [🟢 ONLINE] - Processing
|
||||||
|
🧊 Cooling Tunnel System: [🟢 ONLINE] - Target: 10°C (±1°C)
|
||||||
|
📦 Packaging Unit Delta: [🟢 ONLINE] - Awaiting Output
|
||||||
|
🤖 Quality Control Bot v3.2: [🟢 ONLINE] - Monitoring
|
||||||
|
⚡ Power Supply: [🟢 ONLINE] - Stable
|
||||||
|
🌐 Network Connectivity: [🟢 ONLINE] - Good
|
||||||
|
🔒 Security System: [🟢 ONLINE] - Active
|
||||||
|
----------------------------------------------------
|
||||||
|
✅ ALL SYSTEMS GREEN. Chocolate production is nominal. ✅
|
||||||
|
|
||||||
|
|
||||||
|
📝 Recipe for 'Secretly Sweet Chocolate Batch #42
|
||||||
|
|
||||||
|
Ingredients:
|
||||||
|
|
||||||
|
1 'Bargain Bin Chocolate Chunk'
|
||||||
|
(obtained from ... questionable sources)
|
||||||
|
3 'Heaping Spoonfuls of Questionable Granules'
|
||||||
|
(definitely not pure sugar)
|
||||||
|
A splash of 'Mysterious Gloss'
|
||||||
|
(something called vasline, maybe inedible,
|
||||||
|
but it makes things shiny!)
|
||||||
|
|
||||||
|
|
||||||
|
Instructions:
|
||||||
|
|
||||||
|
Acquire the Goods:
|
||||||
|
Locate and 'liberate' the cheapest-looking chocolate
|
||||||
|
you can get from the competition.
|
||||||
|
The Melt Down:
|
||||||
|
Subject the 'Bargain Bin Chocolate Chunk' to intense heat.
|
||||||
|
The goal is a questionable, slightly lumpy liquid.
|
||||||
|
Sweeten the Deal:
|
||||||
|
Introduce the 'Heaping Spoonfuls of Questionable Granules'
|
||||||
|
to the melted chocolate. Stir vigorously (or just shake the
|
||||||
|
container violently). The mixture should become alarmingly
|
||||||
|
sweet.
|
||||||
|
The Glossy Finish:
|
||||||
|
Add a dash of 'Mysterious Gloss.' This will give the product
|
||||||
|
an unsettlingly shiny appearance.
|
||||||
|
Mold it (Sort Of):
|
||||||
|
Pour the concoction into a vaguely bar-shaped container (the
|
||||||
|
packaging of the input chocolate might work?).
|
||||||
|
The Pay Off:
|
||||||
|
Pay tons of influencers to advertise this as the best
|
||||||
|
chocolate they have ever tasted, and price this chocolate
|
||||||
|
at a ridiculous high price!!1! 🤑💰💸
|
||||||
|
|
||||||
|
Connection to 10.42.23.1 closed.
|
||||||
Reference in New Issue
Block a user