Who thought making a flying shell was a good idea?
This is Bebop from THM. It’s easy rated and is supposed to be about taking over a drone or something.
SSH and Telnet on port 23.
We were given a password: pilot. Let’s try it?
Pretty easy. And in fact we can read both flags as pilot! Surely it’s not that easy?
Yes, it is.
But let’s get root. No wget or curl; the FreeBSD equivalent is fetch:
Probably should’ve found this myself, but anyway:
Easy feels like an understatement.