Writeups

Write ups and Walkthroughs about vulnerable machines

View on GitHub

Basic Pentesting

Back to Tryhackme page


Enumeration

Using Nmap , we found 5 open ports. Port 22,80,139,8009 & 8080 are open port.

nmap result


Website

website

Website page has hint of dev note section.

Using gobuster , found interesting directory of development.

gobuster

development

Two text files found here.

dev

Hint about SMB configuration.

j

Hind about J and K where J has really easy password.


SAMBA enumeration

Googled how to enumerate samba , found this article.

Using enum4linux , got this result.

enum4linux

Kay and jan are two users on system.


Privilege Escalation

Note : Started checking walkthrough because got confused with no files.

Found SSH private rsa id for kay

rsa_id

Got hash from rsa id using ssh2john. Cracking hash got passphrase .

kay rsa key cracking

Logged in using passphrase and got password.

password


Source