Posts

Hi all, today we will take on the IDE room in TryHackMe. It is rated Easy and the room description says: “An easy box to polish your enumeration skills!” Enumeration Nmap So, in the nmap scan, we get four services: Nmap Output FTP server: Anonymous login is allowed according to the nmap scan. Login with the following creds: anonymous : anonymous. After logging in, we have to traverse to the ... directory and then download the file named -. To download that file, simply use get ./- command. ...

Hello everyone, this one is going to be the write-up for the Sweettooth Inc. room on TryHackMe. In this room, we’ll have to first enumerate a vulnerable database where we have to craft a JWT token to login into it and there we get the SSH credentials to the system. Once we get the foothold on the system, we see that that it’s a docker container with an exposed Docker Engine API. We can use it to break out of that docker container to get access to the host machine. ...

Hello all, this is my first HTB write-up and I’m starting off with Spectra which retired just recently. So, lets begin :) Nmap Let’s first start off with a nmap scan. nmap -T4 -sV -sC -p- -oN spectra.nmap -v 10.10.10.229 Scan results: Nmap scan report for spectra.htb (10.10.10.229) Host is up (0.13s latency).PORT STATE SERVICE VERSION 22/tcp open ssh OpenSSH 8.1 (protocol 2.0) | ssh-hostkey: |_ 4096 52:47:de:5c:37:4f:29:0e:8e:1d:88:6e:f9:23:4d:5a (RSA) 80/tcp open http nginx 1.17.4 | http-methods: |_ Supported Methods: GET HEAD |_http-server-header: nginx/1.17.4 |_http-title: Site doesn't have a title (text/html). 3306/tcp open mysql MySQL (unauthorized) |_ssl-cert: ERROR: Script execution failed (use -d to debug) |_ssl-date: ERROR: Script execution failed (use -d to debug) |_sslv2: ERROR: Script execution failed (use -d to debug) |_tls-alpn: ERROR: Script execution failed (use -d to debug) |_tls-nextprotoneg: ERROR: Script execution failed (use -d to debug) We can see that three ports are open. ...