Posts

Showing posts from June, 2023

tryhackme_techsupp0rt_walkthrough

Image
Room Name - Tryhackme techsupp0rt1   https://tryhackme.com/room/techsupp0rt1  Difficulty - Easy Created by - Vikaran Starting the machine, on port 80 Apache default web page is running.  Scanning with nmap -> sudo nmap -sC -sV <ip> | tee nmap.txt Listing smb shares -> smbclient -L <ip> We are able to login to websvr anonymously.  smbclient \\\\<ip>\\websvr Locate the enter.txt file on the share. We are told of a subrion site. But it needs fixing. Going to http://<ip>/subrion doesn't load anything. But the note says to edit from panel.  If we visit http://<ip>/subrion/panel we will see a login page to subrion cms. We have found the username admin but the password is encrypted.  Google "cooked with magical formula" with the keyword "encryption" you will get a result from "Cyberchef". Visit the website and paste the encrypted password on the input section and double click Magic on the left hand side. First result is you...