Your friend wasn’t at all pleased that you’d managed to take control of his network and retrieve his confidential information. So this time he made the task much harder by making the database password much more complex.

You still have access to your friend’s LAN with an attacking machine that you control.

The flag is in the database located on one of the network hosts.

• Start the CTF-ATD "ARP Spoofing HommeDuMilieu"
• Log in with SSH on the machine port 22222 (root:root)
• There is no validation of the virtual environment with a /passwd

Do not hesitate to change the password of the root user in order to be alone on the machine to perform your manipulations.