Arachne Level 7

  • User: 17
  • Pivot SSH Port: 17000
  • Pivot IP Address: downthewire
  • Pivot Port Range: N/A
  • Target IP Address: 10.10.100.243
  • Target Port: 17001-18000

The target port for this level is randomly generated between 17001-18000.  This level requires two steps: find the open port by scanning the listed port range, then connect to the port to read the flag.

man ssh | egrep '\-D'
# Set up a dynamaic SSH  tunnel
ssh -D 1080 user17@downthewire.org -p 17000
# Use the proxy to scan
nmap --proxy socks4://127.0.0.1:1080 <scan options>
proxychains curl -k https://<TGT_IP>:<Port>