Level 15 - Zypher Quest 3

Challenge

You have been given a file auth.log.zip

We can see that the zip file is password-protected

So we have to use a dictionary-based attack tool to brute-force the password

$ zip2john auth.log.zip > auth.txt

This will give you the password, use it to unzip the file and go through it

As we can see the attacker used SSH brute force to hack into the machine

The answer is SSH bruteforce (hydra)

zyp{bruteforce}