BIOHAZARD WALKTHROUGH | TRYHACKME
TASK 1 — INTRODUCTION
- Start from scanning.
- Run nmap scan to find open ports and version.
nmap -A <IP>
Open ports — FTP, SSH, HTTP.
Q1: How many open ports?
A: 3
Q2: What is the team name in operation?
A: STARS alpha team (found in http page)
TASK 2 — THE MANSION
- In <ip>/mansionmain/ , we got directory in comment, open it.
- While investigating this, we got emblem flag.
emblem{fec832623ea498e20bf4fe1821d58727}
- And in its source code, we got a base64.
<!-- SG93IGFib3V0IHRoZSAvdGVhUm9vbS8= -->
- After decoding, we got new room.
How about the /teaRoom/
- Here, we got flag and another room.
lock_pick{037b35e2ff90916a9abf99129c8e1837}
- Here, we got some rooms to research.
- Open /barRroom with lockpick flag.
- In this, we got a string.
- After decoding it, we got music flag — music_sheet{362d72deaf65f5bdc63daece6a1f676e}
- Next, In diningroom2f, we got a rot13 line. After decoding:
You get the blue gem by pushing the status to the lower floor. The gem is on the diningRoom first floor. Visit sapphire.html
- Got other flag in /diningroom2f/sapphire.html
- Enter that music flag here, a new page will appear.
- Then we will get shield flag.
- In /diningroom, submit emblem flag.
- We got a encrypted something, deocde it — — rebecca
- Go to /the_great_shield_key.html and u will get shield flag.
- Next /tigerStatusRoom, after giving gem flag in this room, we got:
- Decrypt it — — RlRQIHVzZXI6IG
- Next room is Gallerty Room.
- We got something similar to creast 1.
Decrypt it — — h1bnRlciwgRlRQIHBh
- Next room is Armour room.
- Submit shield flag. Then we got creast 3.
- Decode it — — c3M6IHlvdV9jYW50X2h
- Next room is Attic room. Submit shield key.
- Got similar like creast 1.
- After decrypt — — pZGVfZm9yZXZlcg==
- Combine all 4 creast.
RlRQIHVzZXI6IGh1bnRlciwgRlRQIHBhc3M6IHlvdV9jYW50X2hpZGVfZm9yZXZlcg==
- Decrypt — — FTP user: hunter, FTP pass: you_cant_hide_forever
Q1: What is the emblem flag?
A:
Get ANWAR1’s stories in your inbox
Join Medium for free to get updates from this writer.
Q2: What is the lock pick flag?
A: emblem{fec832623ea498e20bf4fe1821d58727}
Q3: What is the music sheet flag?
A: lock_pick{037b35e2ff90916a9abf99129c8e1837}
Q4: What is the gold emblem flag?
A: music_sheet{362d72deaf65f5bdc63daece6a1f676e}
Q5: What is the shield key flag?
A: gold_emblem{58a8c41a9d08b8a4e38d02a4d7ff4843}
Q6: What is the blue gem flag?
A: blue_jewel{e1d457e96cac640f863ec7bc475d48aa}
Q7: What is the FTP username?
A: hunter
Q8: What is the FTP password?
A: you_cant_hide_forever
Task 3: THE GUARD HOUSE
- Login to FTP.
- In ftp we got some files and jpg.
- In these, we got 3 ecoded string, lets decode — — plant42_can_be_destroy_with_vjolt
- This string was key of helmet.gpg file.
- And we found helmet flag there.
- Put this key in /hidden_closet/ room.
- In this, we got ssh password — — T_virus_rules
- There is no username here, lets find it in study room.
- We got a file in this room and open file, there is SSH user — — umbrella_guest
Answer the questions below
Q1:What is the SSH login username?
A: umbrella_guest
Q2: What is the SSH login password?
A: T_virus_rules
Q3: Who the STARS bravo team leader?
A: Enrico
TASK 4: THE REVISIT
- Login in SSH.
- Go to cd /.jailcell, we got a note there.
- We also got a note in /weasker user.
- And password of weasker user — — stars_members_are_my_guinea_pig
- Nothing was working umbrella_guest user. So, we switched to weasker user.
- Now do privilage escalation as we have passowrd of user.
- Root flag — cat /root/root.txt
Answer the questions below
Q1: What is the SSH login username?
A: umbrella_guest
Q2: What is the SSH login password?
A: T_virus_rules
Q3: Who the STARS bravo team leader?
A: Enrico
TASK 5: UNDERGROUND LABORATORY
Answer the questions below
Q1: Where you found Chris?
A: jailcell
Q2: Who is the traitor?
A: weasker
Q3: The login password for the traitor?
A: stars_members_are_my_guinea_pig
Q4: The name of the ultimate form?
A: Tyrant
Q5: The root flag?
A: check yourself
