TRICKY

Week 15 practice lab #2

Fake single-user login page on express.js with many vulnerabilities.

Setup

Install software (on Ubuntu).

sudo apt install npm openssh-server telnetd

Clone this repository (on MCPS network).

git -c http.sslVerify=false clone https://github.com/twlinux/tricky.git ~/cloud_server

Install dependencies (on MCPS network).

npm --strict-ssl false install

Create the admin user.

useradd -m -c "Hilarious Clinton" -s /bin/bash -U hilarious
passwd hilarious
usermod -aG sudo hilarious

Change SSH port number to 80 (Ubuntu 17.10).

rvim /etc/ssh/sshd_config
systemctl restart ssh