Machine Info: OS: Linux Difficulty: Intermediate Summary of Results In this walkthrough, we will exploit the target system by guessing weak credentials using in the admin login web portal and bypassing two-factor authentication (2FA) with a default secret key. This brings us to a new vulnerability of the web application, Local File Inclusion…

Link room: [ https://tryhackme.com/room/overpass3hosting ] Before starting, all of the challenges posted here are included in my learning journey. I didn’t solve them all, if I searched or learned from other senpais, I will reference them all. Ideas: Recon with Nmap. Found backups file & decrypt it, its content contains…

Before starting, all of the challenges posted here are included in my learning journey. I didn’t solve them all, if I searched or learned from other senpais, I will reference them all. Ideas: Recon with rustscan and detect IRCd service on port (6697, 8067, 65534) Exploit vulnerable IRCd version 3.2.8.1…

Before starting, all of the challenges posted here are included in my learning journey. I didn’t solve them all, if I searched or learned from other senpais, I will reference them all. Ideas: Recon with nmap & find LFI vulnerability “post.php?post=” Creating one-line command to interact with the vulnerable parameter …

Before starting, all of the challenges posted here are included in my learning journey. I didn’t solve them all, if I searched or learned from other senpais, I will reference them all. Ideas: Recon with nmap & Enumerate on ftp port 21 -> http-proxy port 8080 -> http port 8081. …