#tryhackme

Articles tagged with #tryhackme

[TryHackMe] Island Orchestration
Just another LFI / Kubernetes Token Leak Write-up. Looking for the next holiday destination? Look no further than the Islands of Orchestration. Check out the best tropical islands to visit on your next vacation! Please allow 4 to 5 minutes for the V...
Jun 28, 20226 min read698
[TryHackMe] CyberHeroes
Just another JavaScript Credentials Leak Write-up. Want to be a part of the elite club of CyberHeroes? Prove your merit by finding a way to log in! CTF Link. Footprinting Open ports Nmap scan: $ sudo nmap -sS -Pn -v10 -oA syn_full 10.10.45.211 PORT...
Jun 23, 20222 min read116
[TryHackMe] Sea Surfer
Just another VHost & WP-Login User Disclosure / wkhtmltopdf SSRFer2LFI / Wordpress 404 RCE / tar checkpoint & sudo token Privesc / Local APT install Write-up. CTF Link. It's a beautiful day to hit the beach and do some surfing. Please allow up to 5 ...
Jun 22, 202213 min read4.3K
[TryHackMe] biteme
Just another JavaScript Deobfuscator / Highlighted PHPs Leak / MFA BF / LFI / RSA Key Cracking / ALL & fail2ban action SUDO -L’ed Write-up Stay out of my server! CTF Link. Footprinting Open ports Scanning open ports via Nmap: kali@kali:~$ sudo nmap...
Apr 22, 202210 min read987
[TryHackMe] Dear QA
Just another BufferOverflow Write-up. Are you able to solve this challenge involving reverse engineering and exploit development? CTF Link. Binary analysis The challenge's binary is a 64-bits ELF executable: kali@kali:~$ file DearQA.DearQA DearQA.D...
Feb 28, 20226 min read2.1K
[TryHackMe] Flatline
Just another FreeSWITCH ClueCon API Command Injection / openclinic LPE Write-up How low are your morals? CTF Link. Footprinting Open ports It seems that the SYN scan (via -sS) cannot be processed by the target, as it shows no open ports: [SYN scan...
Feb 25, 20227 min read5.8K