Mirai was a very fun box! It requires thinking outside the box and compiling all information you have to guess some credentials. The root part requires knowledge of how Linux handles external devices to complete.
- Find the admin panel at
- Guess the username and password based on the OS running on the machine.
- Recover root file from usb device at
nmap -n -sV -p- -T 5 -Pn 10.10.10.48
PORT STATE SERVICE VERSION 22/tcp open ssh OpenSSH 6.7p1 Debian 5+deb8u3 (protocol 2.0) 53/tcp open domain dnsmasq 2.76 80/tcp open http lighttpd 1.4.35 1456/tcp open upnp Platinum UPnP 126.96.36.199 (UPnP/1.0 DLNADOC/1.50) 32400/tcp open http Plex Media Server httpd 32469/tcp open upnp Platinum UPnP 188.8.131.52 (UPnP/1.0 DLNADOC/1.50)
HTTP (Port 80)
Port 53 implies that there is a DNS server running on the machine. After adding
10.10.10.48 mirai.htb to
/etc/hosts file, I have visited
http://mirai.htb and it revealed an interesting page.
Pi-hole v3.1.4 is running, so I’ll try to access its default admin panel at
I’ve tried to exploit login pages and fuzz a bit more, but I couldn’t find anything useful. After a while, I remembered the name of this box - Mirai.
Mirai was, or rather still is, a malware that harvested unsecured network devices to created a huge botnet. I recommend reading up about Mirai as it was and still is an amazing malware/botnet.
Back to User
Wait… really… again? We have permission to
sudo su and we have a root!
I lost my original root.txt! I think I may have a backup on my USB stick...
We are looking for usb stick, so let’s go to
Damnit! Sorry man I accidentally deleted your files off the USB stick. Do you know if there is any way to get them back? -James
We can try to recover some data from the USB by running
strings on the entire device, in this case /dev/sdb.
root@raspberrypi:~# strings /dev/sdb >r & /media/usbstick lost+found root.txt damnit.txt >r & >r & /media/usbstick lost+found root.txt damnit.txt >r & /media/usbstick 2]8^ lost+found root.txt damnit.txt >r & 3d3e[THE FLAG IS HERE :)] Damnit! Sorry man I accidentally deleted your files off the USB stick. Do you know if there is any way to get them back? -James