Top-Secret - Revision history

Exf at 13:16, 13 October 2022

2022-10-13T13:16:52Z

← Older revision		Revision as of 13:16, 13 October 2022
Line 1:		Line 1:
	[[File:Top-secret-task.PNG\|thumb\|Top secret task]]		[[File:Top-secret-task.PNG\|thumb\|Top secret task]]
			[[File:000-config.PNG\|thumb\|000-default.conf]]

	===Description===		===Description===

Exf at 13:15, 13 October 2022

2022-10-13T13:15:45Z

← Older revision		Revision as of 13:15, 13 October 2022
Line 14:		Line 14:
	Username: mulder		Username: mulder

	Password: Scully-th3-b3st!</blockquote><blockquote>		Password: Scully-th3-b3st!</blockquote>
			<blockquote>
	SSH Access:		SSH Access:

Line 41:		Line 42:
	I then restarted the apache2 service <code>service apache2 restart</code>		I then restarted the apache2 service <code>service apache2 restart</code>

	~~I then headed to the website again to see~~ if ~~my configuration was successful. Unfortunately~~, ~~I had broken~~ the ~~whole web page and decided to move on to another~~ task...		Test logging in with your browser and if everything works, submit the task for evaluation.
	===Tools===		===Tools===
	* htpasswd		*htpasswd
	* nano		*nano
	* cd		*cd
	* service		*service
	===Flag===		===Flag===
	No flag available, just set up basic authentication method.		No flag available, just set up basic authentication method.

Exf at 13:14, 13 October 2022

2022-10-13T13:14:11Z

← Older revision		Revision as of 13:14, 13 October 2022
Line 26:		Line 26:
	The first thing I did was to make a .htpasswd file for the web page.		The first thing I did was to make a .htpasswd file for the web page.

	With the command <code>htpasswd -c /~~root~~/.htpasswd mulder</code>		With the command <code>sudo htpasswd -c /var/www/.htpasswd mulder</code>

	The program in question next asks for a password, which I set as instructed. Next I browsed to the folder<code>cd /etc/apache2/sites-enable/</code> and opened the file with the editor <code>000-default.conf</code>.		The program in question next asks for a password, which I set as instructed. Next I browsed to the folder<code>cd /etc/apache2/sites-enable/</code> and opened the file with the editor <code>000-default.conf</code>.

	I then added the following text to the file<syntaxhighlight lang="bash">		I then added the following text to the file between <VirtualHost *:80></VirtualHost> tags<syntaxhighlight lang="bash">
	<Directory "/var/www/html">		<Directory "/var/www/html">
	AuthType Basic		AuthType Basic
	AuthName "asd"		AuthName "asd"
	AuthUserFile /~~root~~/.htpasswd		AuthUserFile /var/www/.htpasswd
	Require valid-user		Require valid-user
	</Directory>.		</Directory>
	</syntaxhighlight>		</syntaxhighlight>

Line 48:		Line 48:
	* service		* service
	===Flag===		===Flag===
			No flag available, just set up basic authentication method.

	===Links===		===Links===
	*[[CTF Challenges \| Back to CTF Challenges page]]		*[[CTF Challenges \| Back to CTF Challenges page]]

Exf at 11:24, 30 September 2022

2022-09-30T11:24:20Z

← Older revision		Revision as of 11:24, 30 September 2022
Line 1:		Line 1:
			[[File:Top-secret-task.PNG\|thumb\|Top secret task]]

	===Description===		===Description===
	Management found out that the highly sensitive and top secret documents are accessible to all!		Management found out that the highly sensitive and top secret documents are accessible to all!

Exf at 11:23, 30 September 2022

2022-09-30T11:23:09Z

← Older revision		Revision as of 11:23, 30 September 2022
Line 8:		Line 8:
	You must protect this apache web server with authentication!		You must protect this apache web server with authentication!

	Configure basic authentication to protect the page		Configure basic authentication to protect the page<blockquote>Use these credentials for authenticate

	Use these credentials for ~~auth:~~

	Username: mulder		Username: mulder

	Password: Scully-th3-b3st!		Password: Scully-th3-b3st!</blockquote><blockquote>


	SSH Access:		SSH Access:

Line 23:		Line 19:
	Username: user		Username: user

	Password: Cool2Pass		Password: Cool2Pass</blockquote>

	===Solution===		===Solution===
	The first thing I did was to make a .htpasswd file for the web page.		The first thing I did was to make a .htpasswd file for the web page.

Exf at 11:21, 30 September 2022

2022-09-30T11:21:56Z

← Older revision		Revision as of 11:21, 30 September 2022
Line 27:		Line 27:
	The first thing I did was to make a .htpasswd file for the web page.		The first thing I did was to make a .htpasswd file for the web page.

	With the command <code> htpasswd -c /root/.htpasswd mulder</code>		With the command <code>htpasswd -c /root/.htpasswd mulder</code>

	The program in question next asks for a password, which I set as instructed. Next I browsed to the folder<code>cd /etc/apache2/sites-enable/</code> and opened the file with the editor <code>000-default.conf</code>.		The program in question next asks for a password, which I set as instructed. Next I browsed to the folder<code>cd /etc/apache2/sites-enable/</code> and opened the file with the editor <code>000-default.conf</code>.

	I then added the following text to the file		I then added the following text to the file<syntaxhighlight lang="bash">

	<<syntaxhighlight lang="bash">
	<Directory "/var/www/html">		<Directory "/var/www/html">
	AuthType Basic		AuthType Basic

Exf at 11:21, 30 September 2022

2022-09-30T11:21:32Z

← Older revision		Revision as of 11:21, 30 September 2022
Line 32:		Line 32:

	I then added the following text to the file		I then added the following text to the file
	<~~code~~>
			<<syntaxhighlight lang="bash">
	<Directory "/var/www/html">		<Directory "/var/www/html">
	AuthType Basic		AuthType Basic
Line 39:		Line 40:
	Require valid-user		Require valid-user
	</Directory>.		</Directory>.
	</~~code~~>		</syntaxhighlight>

	I then restarted the apache2 service <code>service apache2 restart</code>		I then restarted the apache2 service <code>service apache2 restart</code>

Exf: Created page with "===Description=== Management found out that the highly sensitive and top secret documents are accessible to all! They must be hidden ASAP! 150pts ===Task=== You must protect this apache web server with authentication! Configure basic authentication to protect the page Use these credentials for auth: Username: mulder Password: Scully-th3-b3st! SSH Access: Hostname: target.... Username: user Password: Cool2Pass ===Solution=== The first thing I did was to make a..."

2022-09-30T11:19:49Z

Created page with "===Description=== Management found out that the highly sensitive and top secret documents are accessible to all! They must be hidden ASAP! 150pts ===Task=== You must protect this apache web server with authentication! Configure basic authentication to protect the page Use these credentials for auth: Username: mulder Password: Scully-th3-b3st! SSH Access: Hostname: target.... Username: user Password: Cool2Pass ===Solution=== The first thing I did was to make a..."

New page

===Description===
Management found out that the highly sensitive and top secret documents are accessible to all!

They must be hidden ASAP!

150pts
===Task===
You must protect this apache web server with authentication!

Configure basic authentication to protect the page

Use these credentials for auth:

Username: mulder

Password: Scully-th3-b3st!

SSH Access:

Hostname: target....

Username: user

Password: Cool2Pass
===Solution===
The first thing I did was to make a .htpasswd file for the web page.

With the command <code> htpasswd -c /root/.htpasswd mulder</code>

The program in question next asks for a password, which I set as instructed. Next I browsed to the folder<code>cd /etc/apache2/sites-enable/</code> and opened the file with the editor <code>000-default.conf</code>.

I then added the following text to the file
<code>
<Directory "/var/www/html">
AuthType Basic
AuthName "asd"
AuthUserFile /root/.htpasswd
Require valid-user
</Directory>.
</code>

I then restarted the apache2 service <code>service apache2 restart</code>

I then headed to the website again to see if my configuration was successful. Unfortunately, I had broken the whole web page and decided to move on to another task...
===Tools===
* htpasswd
* nano
* cd
* service
===Flag===

===Links===
*[[CTF Challenges | Back to CTF Challenges page]]