Post

Suspicious Threat

Suspicious Threat

CHALLENGE DESCRIPTION

Our SSH server is showing strange library linking errors, and critical folders seem to be missing despite their confirmed existence. Investigate the anomalies in the library loading process and filesystem. Look for hidden manipulations that could indicate a userland rootkit. Creds: root:hackthebox

SOLUTION

Access to SSH

Use the ldd command to inspect which libraries the SSH server executable depends on.

Searching for flag