Skip to main content

We use cookies to ensure you get the best user experience. For more information see our cookie policy.

Red Stone One Carat

First room of the Red Stone series. Hack ruby using ruby.

Task 1: Info Intro

Rooms of the Red Stone series share the same goals:

  • Discovering and learning Ruby
  • Scripting and hacking with Ruby
  • Exploiting and identifying vulnerabilities in Ruby programs

I'll give you a valuable source to find stuff related to Offensive Security using Ruby: https://rubyfu.net/.

Disclaimer: this room requires custom exploitation and scripting and is more CTF-like than real life applicable.

The intended way of this challenge is to complete it by only using Ruby.

Answer the questions below


Task 2: Practical Flags

Start with SSH bruteforce on user noraj.

Answer the questions below

  1. SSH password

  2. user.txt

  3. root.txt

Task 3: Info About the author

I hoped you enjoyed the room.
To find out more on me (noraj) check pwn.by/noraj.
You can find my other THM rooms on my THM profile.

Answer the questions below


Room Icon

Red Stone One Carat

First room of the Red Stone series. Hack ruby using ruby.

medium

75 min

3,284

User profile photo.

To access material, start machines and answer questions login.

Rooms of the Red Stone series share the same goals:

  • Discovering and learning Ruby
  • Scripting and hacking with Ruby
  • Exploiting and identifying vulnerabilities in Ruby programs

I'll give you a valuable source to find stuff related to Offensive Security using Ruby: https://rubyfu.net/.

Disclaimer: this room requires custom exploitation and scripting and is more CTF-like than real life applicable.

The intended way of this challenge is to complete it by only using Ruby.

Answer the questions below

Set up your virtual environment

To successfully complete this room, you'll need to set up your virtual environment. This involves starting both your AttackBox (if you're not using your VPN) and Lab Machines, ensuring you're equipped with the necessary tools and access to tackle the challenges ahead.
Attacker machine
Status:Off
Lab machine
Status:Off

Start with bruteforce on user noraj

.

Answer the questions below

SSH password

user.txt

root.txt

I hoped you enjoyed the room.
To find out more on me (noraj) check pwn.by/noraj.
You can find my other rooms on my THM profile.

TryHackMe
Answer the questions below