📝 Final Report & Lessons Learned
1. Executive Summary
Meow is a Tier 0 machine that demonstrates the extreme risk associated with misconfigured legacy services. The machine exposes a Telnet service that allows full administrative access to the root account without any password authentication.
2. Key Takeaways
- Technical takeaways: Telnet is an inherently insecure protocol. SSH should always be favored.
- Strategic takeaways: Basic service enumeration can reveal “low-hanging fruit” vulnerabilities.
3. Remediation
- Disable Telnet: Replace Telnet with SSH.
- Enforce Password Policies: Ensure administrative accounts have strong passwords.
- Firewall Restrictions: Limit access to administrative services to trusted IP addresses.
4. Skills Gained
- Identifying legacy services via Nmap
- Basic Telnet service interaction
- Exploiting insecure default configurations
- Validating root access levels
Operations