Tryhackme

Introduction — Weasel is a medium machine. The only tool I used was smbclient to connect with file share. Reconnaissance Start the reconnaissance running Nmap. I’ve used “nmap -sC -sV MACHINE_IP” and got all the necessary information. As we can see, the host is a Windows machine and has 6 services running. The…

Boot the box and find a way in to escalate all the way to root! https://tryhackme.com/room/valleype Solution Start the machine and wait for the ip address to become available. You can test that you can connect to the machine by doing a simple ping command ping $IP. To enumerate the machine…

For the tool’s commands, I used: https://www.hackerstoolkit.co We've got an IP address; let's scan it: nmap -sS -sV -sC 10.10.255.132 root@ip-10-10-253-48:~# nmap -sS -sV -sC 10.10.255.132 Starting Nmap 7.60 ( https://nmap.org ) at 2023-05-27 13:56 BST Nmap scan report for ip-10-10-255-132.eu-west-1.compute.internal (10.10.255.132) Host is up (0.00014s latency). Not shown: 998 closed ports PORT…

Site = THM Creator = Valley Difficulty = 🍕🍕 Basic Summary: So the machine is technically rated easy but there are some hassles.There is an ftp,ssh,http.Checking the website its an imaging service, after some directory busting we get to an admin page, from there we get a note telling about the…

Site = THM Creator = NinjaJc01 Difficulty = 🍕 * 1.5 Basic Summary: So this machine is made by James, A bit on the middle beginner side difficulty.So the machine has http and ssh.The Website is serving downloads for a password manager.Checking the source code of the admin login page theres…

This simple technique works very well for me. And the good news is anyone can try this and it will work without any doubts. The technique is simple. When you want to do some task or work but you don’t have interest to do that task, without thinking much start…

Linux Fundamental Part Three Hello, my friends, it me Rashin Thapa again who was studying ethical hacking in softwarica college who have made a blog on Linux fundamentals part one and part two. Now, it the turn of part three which is little advanced than part one and two because…

This is the last room for vulnerability research in the Junior Pentester path. We will apply the knowledge gained throughout the Vulnerability Module in this challenge room. We shall begin by deploying the vulnerable machine attached to this by pressing the green “Start Machine” button. It is recommended that you…

So, first things first we have to scan the machine to check ports which are open. So as port 80 is open, As we know there is a Web Server running on port 80 so let’s enumerate Web Server first.