> For the complete documentation index, see [llms.txt](https://cybertuna.gitbook.io/underthewire/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cybertuna.gitbook.io/underthewire/cyborg/untitled.md).

# Cyborg 0 -> 5

## Cyborg 0 -> 1

Grab creds from the slack and login via SSH:

```
ssh cyborg1@cyborg.underthewire.tech
```

```
Password: cyborg1
```

## Cyborg 1 -> 2

The password for cyborg2 is the state that the user Chris Rogers is from as stated within Active Directory.

```
Get-AdUser -Filter "givenName -eq 'Chris'" -Property *
```

```
Password: kansas
```

{% hint style="info" %}
Reference: <https://adamtheautomator.com/get-aduser/>
{% endhint %}

## Cyborg 2 -> 3

The password for cyborg3 is the host A record IP address for CYBORG718W100N PLUS the name of the file on the desktop.

```
Get-DnsServerResourceRecord -ZoneName "underthewire.tech" -Name "CYBORG718W100N" -RRType "A"
```

```
Password: 172.31.45.167_ipv4
```

{% hint style="info" %}
<https://docs.microsoft.com/en-us/powershell/module/dnsserver/get-dnsserverresourcerecord?view=windowsserver2019-ps>
{% endhint %}

{% hint style="warning" %}
To do: Complete the challenge with WMI
{% endhint %}

## Cyborg 3 -> 4

&#x20;The password for cyborg4 is the number of users in the Cyborg group within Active Directory **PLUS** the name of the file on the desktop.

```
Get-ADGroupMember -identity "cyborg" | Measure-Object
```

```
Password: 88_objects
```

## Cyborg 4 -> 5

&#x20;The password for cyborg5 is the PowerShell module name with a version number of 8.9.8.9 **PLUS** the name of the file on the desktop.

```
Get-Module -ListAvailable | ?{$_.Version -like '8.9.8.9'}
```

```
Password: bacon_eggs
```