Horreur, malheur 2/5 - Accès initial

Description

You’ve just been hired as Chief Information Security Officer (CISO) for a strategic company.

Arriving at your office on your first day, you realize that your predecessor has left you a USB stick with a note on it: VPN compromised (integrity). Version 22.3R1 b1647.

On the USB key, you find two files: an encrypted archive and the device logs. Now focus your attention on the logs. With the equipment compromised, you need to find the vulnerability used by the attacker, as well as the attacker’s IP address.

The flag format is: FCSC{CVE-XXXX-XXXXX:<adresse_IP>}

This challenge has been split into five parts:

• Horreur, malheur 1/5 - Archive chiffrée.
• Horreur, malheur 2/5 - Accès initial.
• Horreur, malheur 3/5 - Simple persistance.
• Horreur, malheur 4/5 - Pas si simple persistance.
• Horreur, malheur 5/5 - Un peu de CTI.