Bulletproof Penguin

You have been hired by the XYZ company as a consultant to harden the Bulletproof Penguin, an old server that's never been hacked (as far as we know). As you arrive, the company's IT crew hands you a vulnerability scan report that was recently made against the server, and asks you to implement solutions to each finding. To help you, they've added notes on their discussions for each of the vulnerabilities. Armed with only your laptop, you are given SSH access to the server with the following credentials:

Username	thm
Password	p3ngu1n

Note: Be sure to click the Start Machine button at the top of the task.

To help you on your quest, the crew mentions that the person who did the vulnerability scan installed a script that validates if the solutions to the reported vulnerabilities have been correctly implemented. Each time you are done implementing a solution, just run the get-flags command from the server's console to get a flag.

Room Prerequisites

This challenge is based on the rooms of the Network and System Security module. Be sure to check them if you feel stuck in the challenge.