FLAG73

FLAG74

FLAG75

FLAG76

Enumeration

PORT     STATE  SERVICE VERSION
22/tcp   open   ssh     OpenSSH 7.6p1 Ubuntu 4ubuntu0.3 (Ubuntu Linux; protocol 2.0)
| ssh-hostkey: 
|   2048 51:eb:88:1f:a4:26:f8:af:b6:e4:fe:e3:76:d2:01:ad (RSA)
|   256 7b:87:fc:a8:a8:29:25:da:88:8e:0d:c6:33:94:16:5a (ECDSA)
|_  256 d6:fa:83:ed:ce:58:d6:b3:69:e4:2c:ec:d3:da:ed:10 (ED25519)
80/tcp   open   http    Apache httpd 2.4.29 ((Ubuntu))
|_http-title: Apache2 Ubuntu Default Page: It works
|_http-server-header: Apache/2.4.29 (Ubuntu)
5000/tcp open   http    Werkzeug httpd 1.0.1 (Python 3.6.9)
|_http-title: Index
|_http-server-header: Werkzeug/1.0.1 Python/3.6.9
8404/tcp closed svcloud
Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel

Exploitation

werkzeug

Privilege Escalation