Top-Secret: Difference between revisions
No edit summary |
No edit summary |
||
| Line 26: | Line 26: | ||
The first thing I did was to make a .htpasswd file for the web page. | The first thing I did was to make a .htpasswd file for the web page. | ||
With the command <code>htpasswd -c / | With the command <code>sudo htpasswd -c /var/www/.htpasswd mulder</code> | ||
The program in question next asks for a password, which I set as instructed. Next I browsed to the folder<code>cd /etc/apache2/sites-enable/</code> and opened the file with the editor <code>000-default.conf</code>. | The program in question next asks for a password, which I set as instructed. Next I browsed to the folder<code>cd /etc/apache2/sites-enable/</code> and opened the file with the editor <code>000-default.conf</code>. | ||
I then added the following text to the file<syntaxhighlight lang="bash"> | I then added the following text to the file between <VirtualHost *:80></VirtualHost> tags<syntaxhighlight lang="bash"> | ||
<Directory "/var/www/html"> | <Directory "/var/www/html"> | ||
AuthType Basic | AuthType Basic | ||
AuthName "asd" | AuthName "asd" | ||
AuthUserFile / | AuthUserFile /var/www/.htpasswd | ||
Require valid-user | Require valid-user | ||
</Directory> | </Directory> | ||
</syntaxhighlight> | </syntaxhighlight> | ||
| Line 48: | Line 48: | ||
* service | * service | ||
===Flag=== | ===Flag=== | ||
No flag available, just set up basic authentication method. | |||
===Links=== | ===Links=== | ||
*[[CTF Challenges | Back to CTF Challenges page]] | *[[CTF Challenges | Back to CTF Challenges page]] | ||
Revision as of 13:14, 13 October 2022
Description
Management found out that the highly sensitive and top secret documents are accessible to all!
They must be hidden ASAP!
150pts
Task
You must protect this apache web server with authentication!
Configure basic authentication to protect the page
Use these credentials for authenticate
Username: mulder
Password: Scully-th3-b3st!
SSH Access:
Hostname: target....
Username: user
Password: Cool2Pass
Solution
The first thing I did was to make a .htpasswd file for the web page.
With the command sudo htpasswd -c /var/www/.htpasswd mulder
The program in question next asks for a password, which I set as instructed. Next I browsed to the foldercd /etc/apache2/sites-enable/ and opened the file with the editor 000-default.conf.
I then added the following text to the file between <VirtualHost *:80></VirtualHost> tags
<Directory "/var/www/html">
AuthType Basic
AuthName "asd"
AuthUserFile /var/www/.htpasswd
Require valid-user
</Directory>
I then restarted the apache2 service service apache2 restart
I then headed to the website again to see if my configuration was successful. Unfortunately, I had broken the whole web page and decided to move on to another task...
Tools
- htpasswd
- nano
- cd
- service
Flag
No flag available, just set up basic authentication method.
