(Try Hack Me) Walkthrough

  Try-hack-me INCLUSION : Walkthrough This room is meant to be a beginner’s introduction to local file inclusion, a vulnerability which occurs when some web-app includes files from its own local directories. Let us start with enumeration. Run nmap  to get the services running on open ports and their versions. #nmap -A -sC -sV <target IP> Here, HTTP is open. SSH is as well, which we’ll use later. When we connect to machine's IP, we get to see few articles. The LFI page source: The page source on this machine tells us that “lfiattack” is a local file that the web server is just showing up. If you read the article, it gives us a hint for exploiting this. It’s called a directory traversal attack, and it can be accomplished here by replacing the file name  with “ ../../../../etc/passwd. ” Going to our malicious URL will display the Linux file containing the password information for the users on the machine. Simply make note of the password listed for user “falconfeast” a...

  Try-hack-me Lian_Yu : Walkthrough This post is a walkthrough of an Arrowverse themed beginner CTF box on Tryhackme. Let’s get started by deploying the machine. Now, after deploying the machine, start with a basic Nmap scan and see which ports and services are open and running on the particular IP address. #nmap -A -sC -sV <target IP> Port 80 is open and running so let’s look at the webpage first.. The First step is to check the page source and robots.txt but no information found there, so let’s move to enumeration. #gobuster dir -u http://<target IP>/ -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt Looks like we have found a directory /island let’s look at it. The webpage looks like this at first instance but when I saw the source code I realized the the code word is also given in as vigilante but is in the white text. So here we got our code word.  I then ran gobuster again with the addition of the new directory I had found directory inside ...

  Try Hack Me    Simple CTF Walkthrough Simple CTF  Challenge on TryHackMe Platform is a beginner level CTF, if you want to learn about CTF's, this room is perfect for you! So let’s get going! Initially, let's deploy our machine get connected to THM VPN and then, we are ready to begin. We need to run a Nmap scan against the machine so that we know which ports are open and which services are operational on these ports. I am going to use an aggressive Nmap scan.   #nmap -A -sC -Pn <Target IP> Analyzing the above Nmap scan we now know the number of ports and their associated services that are running on the host. So we have 2 services running under port 1000 and ssh service running on the higher port. Also, as highlighted above, w e see that we have got an anonymous ftp login, let’s try to log in and see if we can find anything. From ftp access as shown above, we are able to gather some information as ForMitch.txt. We will further extract the file and le...