> For the complete documentation index, see [llms.txt](https://cybertuna.gitbook.io/underthewire/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cybertuna.gitbook.io/underthewire/groot/groot-0-greater-than-5.md).

# Groot 0 -> 5

## Groot 0 -> 1

Grab creds from the slack and login via SSH:

```
ssh groot1@groot.underthewire.tech
```

```
Password: groot1
```

## Groot 1 -> 2

The password for groot2 is the last five alphanumeric characters of the MD5 hash of this system’s hosts file.

```
Get-FileHash C:\Windows\System32\drivers\etc\hosts -Algorithm MD5
```

```
Password: 464c3
```

## Groot 2 -> 3

The password for groot3 is the word that is made up from the letters in the range of 1,481,110 to 1,481,117 within the file on the desktop.

```
$word = (Get-Content .\elements.txt);$list = ""; 1481110..1481117 | ForEach-Object {$list += $word[$PSItem]} ; $list
```

```
Password: hiding
```

{% hint style="info" %}
<https://overpoweredshell.com/Exploring-PowerShell-6-Character-Ranges/>
{% endhint %}

{% hint style="warning" %}
Need a more efficient method, if exists
{% endhint %}

## Groot 3 -> 4

The password for groot4 is the number of times the word “beetle” is listed in the file on the desktop.

```
(Get-Content .\words.txt) -split ' '| ?{$_ -like 'beetle'} | Measure-Object
```

```
Password: 5
```

{% hint style="info" %}
Same as Century 14 -> 15
{% endhint %}

## Groot 4 -> 5

The password for groot5 is the name of the Drax subkey within the HKEY\_CURRENT\_USER (HKCU) registry hive.

```
Get-ChildItem HKCU:\ -Recurse | Select-String Drax
Get-ChildItem  -Path "HKCU:\Software\Microsoft\Assistance\Drax"
```

```
Password: destroyer
```