---
# System prepended metadata

title: Untitled

---

# Process of 2 CTF  
  
- Boot into single-user mode in grub command with read-write `rw`  
```bash  
rw init=bin/bash
```
  
When we are into a [single-user mode](https://en.wikipedia.org/wiki/Single-user_mode), the Linux server will be in [level-1](https://en.wikipedia.org/wiki/Runlevel)  no services are enabled in this mode.  
  
First I have direct to `var/www`, which Ubuntu server live host project. I have found the 1st flag in the `crypto` folder below, I have attached the snap.
  
## First Flag
![](https://hackmd.io/_uploads/HJLPbfPf6.png)
  
I found out some of the projects were written in JS and python. The `var/www/halborn-invoice` project has been written in JS and some TODO tags. At the beginning of CFT, I mentioned that no services are active in level 1. So I have to enable the internet to install some packages in the `halborn-invoice` project.
  
**Enable internet**  
-  Check the available internet  
```bash  
ip link
```
- Output
![](https://hackmd.io/_uploads/SkwRMMPzp.png)


  
- **Enable the network interface**  
```bash  
ip link set enp0s17 up  
```
- Output  
![](https://hackmd.io/_uploads/Hy5kQMwfp.png)

- Set up the DNS 
![](https://hackmd.io/_uploads/SJDbXMvG6.png)

- Connect to `client`  
```bash  
dhclient enp0s17
```
- Output  
![](https://hackmd.io/_uploads/rysf7MDf6.png)

  
Finally, I can download the package on the `js` project and solve the `TODO:` tag. Turnout is a wildcard, with no flag, and not variable FLAG  in `.env`.  I have taken a look in the Python project false positive no flag. I have explored all the directories and finally caught a flag in the root folder.  
  
## Second flag  
- Output  
![](https://hackmd.io/_uploads/H1R7Qzwfa.png)

The IP Address of the VM is 172.20.10.11. I have checked all the port which is live, and no red flag has come to my attention.    
  
 Thanks for this first assessment,  Looking forward to the following assessment, which will be quite interesting.