UnderTheWire Century Guide

Previous Level Guide: Century Level 4 → 5

Access

SSH: ssh century5@century.underthewire.tech -p 22

Password: 6265

Info

The password for Century6 is the short name of the domain in which this system resides in PLUS the name of the file on the desktop.

NOTE:
– If the short name of the domain is “blob” and the file on the desktop is named “1234”, the password would be “blob1234”.
– The password will be lowercase no matter how it appears on the screen.

Theory

To get the password, we'll just need to use dir and get the operating system information of the computer, because it's a windows server, it has a domain on the info. So, to get the operating system information we need the command to get a variable of the system, and get te vaviable with the info of the system:

Get-WmiObject Win32_ComputerSystem
dir

Solution

Now that we are in the level, we will get the number from using dir:

PS C:\users\century5\desktop> dir


    Directory: C:\users\century5\desktop


Mode                LastWriteTime         Length Name
----                -------------         ------ ----
-a----        8/30/2018   3:29 AM             54 3347

And now we just need the domain from the system info:

PS C:\users\century5\desktop> Get-WmiObject Win32_ComputerSystem


Domain              : underthewire.tech
Manufacturer        : OpenStack Foundation
Model               : OpenStack Nova
Name                : UTW
PrimaryOwnerName    : UTW_Team
TotalPhysicalMemory : 12582359040

Now to get the short domain, it's just the domain without extra info, like the top level domain and subdomains and stuff. So we just join the short domain with the name of the file number and we get this"

underthewire3347

And that's the password! Now we should be good to go to the next level.