You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
[QUESTION] password of machine 2 in scan project #3124
You are right that the password for 01_scan_RRF-CONTROL isn't listed! However, that is by design.
While you have SSH access to the laptop to start your work, your mission is to 'find a way in' to the server. Providing a password would defeat the purpose of the scanning and discovery phase.
Use the tools mentioned (like nmap and arp-scan) to identify what services are running on that machine once you find it. Look for any 'open doors' that don't require a password, or services that might be vulnerable. The 'RRF-CONTROL>' prompt is your reward for finding that entry point.
You are right that the password for 01_scan_RRF-CONTROL isn't listed! However, that is by design.
While you have SSH access to the laptop to start your work, your mission is to 'find a way in' to the server. Providing a password would defeat the purpose of the scanning and discovery phase.
Use the tools mentioned (like nmap and arp-scan) to identify what services are running on that machine once you find it. Look for any 'open doors' that don't require a password, or services that might be vulnerable. The 'RRF-CONTROL>' prompt is your reward for finding that entry point.
Please let me know if I missed something.
Hello @pedrodesu
yeah you are write but when we found the IP and ssh open port we found that the machine need a password
"i see in the image of the subject has a password in it" but if the password is needed so the subject must mention it or if we don't need it so the machine need to change to open it without a password and thanks for time.
"i see in the image of the subject has a password in it" but if the password is needed so the subject must mention it or if we don't need it so the machine need to change to open it without a password and thanks for time.
the objective of the project is for you to feel like discovering and mapping a network and trying to get access to the machine
the password not being given explicitly is just be design as one of the first to complete that project
it was fun for me to get stuck at the password part
agin if you have clearly given the password you will not wait for the nmap part nor trying figuring out the ip address of the host using arp scan
you can directly log in to the machine and type ip a lol and get the port the service is runnign on that would ruin the subject
so again "it is by design".
it is not a mistake.
"i see in the image of the subject has a password in it" but if the password is needed so the subject must mention it or if we don't need it so the machine need to change to open it without a password and thanks for time.
the objective of the project is for you to feel like discovering and mapping a network and trying to get access to the machine the password not being given explicitly is just be design as one of the first to complete that project it was fun for me to get stuck at the password part agin if you have clearly given the password you will not wait for the nmap part nor trying figuring out the ip address of the host using arp scan you can directly log in to the machine and type ip a lol and get the port the service is runnign on that would ruin the subject so again "it is by design". it is not a mistake.
no that's not the subject because will not use nmap and tols you enter directly so its bad to find the passwword dirctly
i think the best idea is to make a crepted password by the ip and port and after found the ip+port you can decrept the password and use the real password with ssh
@kill-ux, I think there is a misunderstanding of what this cybersecurity project entails: If we gave you the password, there would be no project!
Look closely at the screenshot in the subject. It shows an example of using an exploit to reset a root password to 210N0101. The subject is telling you to become the person in that screenshot.
As @oriax11 correctly stated, your task is to use the tools mentioned (nmap, arp-scan, etc.) to find a weakness. If you are prompted for a password you don't have, it means you haven't found the right entry point or exploit yet. Success is defined by getting to the RRF-CONTROL> prompt without us handing you the keys: The password isn't "missing" from the subject; the lack of a password is the obstacle you are being graded on overcoming!
@kill-ux, I think there is a misunderstanding of what this cybersecurity project entails: If we gave you the password, there would be no project!
Look closely at the screenshot in the subject. It shows an example of using an exploit to reset a root password to 210N0101. The subject is telling you to become the person in that screenshot.
As @oriax11 correctly stated, your task is to use the tools mentioned (nmap, arp-scan, etc.) to find a weakness. If you are prompted for a password you don't have, it means you haven't found the right entry point or exploit yet. Success is defined by getting to the RRF-CONTROL> prompt without us handing you the keys: The password isn't "missing" from the subject; the lack of a password is the obstacle you are being graded on overcoming!
I don't mentioned that i want to prompted for password. No i know that the subject is to use the tools (nmap,..) but in the end after finding port and ip you will be in stack because we see that machine still need password and i mentioned that the way that give us password in the image is not good for me because I didn't achieve will in the image and i like if i see vulnerability in the machine that after finding it we found the password.
Activity
pedrodesu commentedon Jan 7, 2026
Hello @kill-ux!
You are right that the password for
01_scan_RRF-CONTROLisn't listed! However, that is by design.While you have SSH access to the laptop to start your work, your mission is to 'find a way in' to the server. Providing a password would defeat the purpose of the scanning and discovery phase.
Use the tools mentioned (like
nmapandarp-scan) to identify what services are running on that machine once you find it. Look for any 'open doors' that don't require a password, or services that might be vulnerable. The 'RRF-CONTROL>' prompt is your reward for finding that entry point.Please let me know if I missed something.
oriax11 commentedon Jan 14, 2026
Not really there is no vulnerable services
the password is in the subject
you just need to read it carefully.
kill-ux commentedon Jan 17, 2026
Hello @pedrodesu
yeah you are write but when we found the IP and ssh open port we found that the machine need a password
"i see in the image of the subject has a password in it" but if the password is needed so the subject must mention it or if we don't need it so the machine need to change to open it without a password and thanks for time.
oriax11 commentedon Jan 17, 2026
"i see in the image of the subject has a password in it" but if the password is needed so the subject must mention it or if we don't need it so the machine need to change to open it without a password and thanks for time.
the objective of the project is for you to feel like discovering and mapping a network and trying to get access to the machine
the password not being given explicitly is just be design as one of the first to complete that project
it was fun for me to get stuck at the password part
agin if you have clearly given the password you will not wait for the nmap part nor trying figuring out the ip address of the host using arp scan
you can directly log in to the machine and type ip a lol and get the port the service is runnign on that would ruin the subject
so again "it is by design".
it is not a mistake.
kill-ux commentedon Jan 19, 2026
no that's not the subject because will not use nmap and tols you enter directly so its bad to find the passwword dirctly
i think the best idea is to make a crepted password by the ip and port and after found the ip+port you can decrept the password and use the real password with ssh
pedrodesu commentedon Apr 22, 2026
@kill-ux, I think there is a misunderstanding of what this cybersecurity project entails: If we gave you the password, there would be no project!
Look closely at the screenshot in the subject. It shows an example of using an exploit to reset a root password to 210N0101. The subject is telling you to become the person in that screenshot.
As @oriax11 correctly stated, your task is to use the tools mentioned (
nmap,arp-scan, etc.) to find a weakness. If you are prompted for a password you don't have, it means you haven't found the right entry point or exploit yet. Success is defined by getting to theRRF-CONTROL>prompt without us handing you the keys: The password isn't "missing" from the subject; the lack of a password is the obstacle you are being graded on overcoming!kill-ux commentedon Apr 24, 2026
I don't mentioned that i want to prompted for password. No i know that the subject is to use the tools (nmap,..) but in the end after finding port and ip you will be in stack because we see that machine still need password and i mentioned that the way that give us password in the image is not good for me because I didn't achieve will in the image and i like if i see vulnerability in the machine that after finding it we found the password.
By the way thanks for your time @pedrodesu and @oriax11 .