PicoCTF2018 - Miscellaneous - ssh-keyz

PicoCTF2018 - Miscellaneous - ssh-keyz


Objective:
As nice as it is to use our webshell, sometimes its helpful to connect directly to our machine. To do so, please add your own public key to ~/.ssh/authorized_keys, using the webshell. The flag is in the ssh banner which will be displayed when you login remotely with ssh to  with your username.




Solution:
ok so I used puttykeygen to generate a pub and private key

connected to webshell under my home directory I created a folder name ./ssh/authroized_keys
mkdir ./ssh/authorized_keys

I created a new file using vim

vim pub.key

inserted my public key in the file and saved it

I then copied the pub key to the directory I created earlier ./ssh/authorized_keys

using putty I connected up to picoctf2018 using ssh

login as: ************
Pre-authentication banner message from server:
| picoCTF{who_n33ds_p4ssw0rds_38dj21}
End of banner message from server
Keyboard-interactive authentication prompts from server:
| Enter your platform password:

and there is the flag


picoCTF{who_n33ds_p4ssw0rds_38dj21}