TryHackMe: [Day 12] Networking Sharing Without Caring

Mac Leo
3 min readApr 14, 2022

--

  1. Scan the target server with the IP MACHINE_IP. Remember that MS Windows hosts block pings by default, so we need to add -Pn, for example, nmap -Pn MACHINE_IP for the scan to work correctly. How many TCP ports are open?

ANS: 7

EXPLANATION:

Step 1:

Type this command on terminal:

nmap -Pn 10.10.214.228

2. Network File System (NFS) is a protocol that allows the ability to transfer files between different computers and is available on many systems, including MS Windows and Linux. Consequently, NFS makes it easy to share files between various operating systems.

In the scan results you received earlier, you should be able to spot NFS or mountd, depending on whether you used the -sV option with Nmap or not. Which port is detected by Nmap as NFS or using the mountd service?

ANS: 2049

EXPLANATION:

Type this command on terminal:

nmap -Pn -sV 10.10.214.228

3. As we can see in the terminal output above, we have two shares, /share and /my-notes. After you have started the attached machine, use the AttackBox terminal to discover the shares on MACHINE_IP.

How many shares did you find?

ANS: 4

EXPLANATION:

Step 1: Type this command on terminal:

showmount -e 10.10.214.228

4. How many shares show “everyone”?

ANS: 3

EXPLANATION:

Step 1: Type this command on terminal:

showmount -e 10.10.214.228

5. There are two text files. We can open the file using any text editor such as nano FILENAME or something quicker such as less FILENAME.

What is the title of file 2680–0.txt?

ANS: Meditations

EXPLANATION:

Step 1: mkdir tmp1

Step 2: mount 10.10.214.228:/my-notes tmp1 (IF IT`S NOT WORKING, TRY ON OTHER FILE)

Step 3: mount 10.10.214.228:/share tmp1

Step 4: ls

Step 5: less 2680–0.txt

6. It seems that Grinch Enterprises has forgotten their SSH keys on our system. One of the shares contains a private key used for SSH authentication (id_rsa). What is the name of the share?

ANS: confidential

EXPLANATION:

Step 1: mkdir tmp2

Step 2: mount 10.10.214.228:/confidental

Step 3: ls

7. We can calculate the MD5 sum of a file using md5sum FILENAME. What is the MD5 sum of id_rsa?

ANS: 3e2d315a38f377f304f5598dc2f044de

EXPLANATION:

Step 1: mdsum id_rsa

*****************THANK YOU****KEEP LEARNING ******************

HOPE YOU GUYS, THIS WALKTHROUGH MIGHT HELP YOU,IF SO LIKE THE PAGE WILL BE MUCH APPRECIATED AND FOLLOW MY PROFILE FOR MORE WRITE-UPS

*******PEACE*****

--

--

Mac Leo

Hacker |Cybersecurity Researcher | CTF Player |Cybersecurity Enthusiast