First Blood: Backdoor to Cracked Credentials on Metasploitable

Part two of the Proxmox cyber-range series: the first real attack. Connecting to a root
backdoor left listening on Metasploitable, stealing the password file over the target's
own web server, and cracking six of seven hashes in seconds with John the Ripper. A
complete recon-to-credential-access chain, and a hard look at why weak passwords plus
fast hashes equal instant compromise.