UnderTheWire Cyborg Guide

Previous Level Guide: Cyborg Level 1 → 2

Access

SSH: ssh cyborg2@cyborg.underthewire.tech -p 22

Password: kansas

Info

The password for cyborg3 is the host A record IP address for CYBORG718W100N PLUS the name of the file on the desktop.

NOTE:
– If the IP is “10.10.1.5” and the file on the desktop is called “_address”, then the password is “10.10.1.5_address”.
– The password will be lowercase no matter how it appears on the screen.

▼ HINT:
WMI or cmdlets… choices, choices.


▼ HINT:
Each domain client has its own specific Zone Name.

Theory

To get the password, it's pretty simple, to get the IP record from any host under the same domain as the server is, so the machine's server, or well, underthewire.tech, and just search for the CYBORG718W100N name just putting it after the resolve dns name command, ok wait lemme explain it a lil better, which is used to search DNS queries for a specific name, it works kinds like the nslookup command, a command that lets you search queries of DNS records. So the commands are the dir to get the filename and resolve-dnsname with the name after it to find its info like the ip we need for the password:

dir
Resolve-DnsName CYBORG718W100N

Solution

Firstly we'll use the dir command now that we are inside the shell:

PS C:\users\cyborg2\desktop> dir


    Directory: C:\users\cyborg2\desktop


Mode                LastWriteTime         Length Name
----                -------------         ------ ----
-a----        2/26/2022   2:14 PM              0 _ipv4

Now let's do the resolve command, see if it works correctly:

PS C:\users\cyborg2\desktop> Resolve-DnsName CYBORG718W100N

Name                                           Type   TTL   Section    IPAddress
----                                           ----   ---   -------    ---------
CYBORG718W100N.underthewire.tech               A      3600  Answer     172.31.45.167

There we go! Now we can join the IP address of this with the ipv4 file name, and we get this:

172.31.45.167_ipv4

And that's the password! Now we should be good to go to the next level.