Ignite — TryHackMe Walkthrough

Hello everyone. I’m Bodhendu Panda a cyber security geek. Today lets solve the machine Ignite together.

Link :- https://tryhackme.com/room/ignite

Let scan for the open ports and services running on the machine using Nmap.

As port 80 is open now on visiting I found it to be running on fuel CMS. I googled to find an exploit on the fuel CMS and found an RCE.

Get Bodhendu Panda’s stories in your inbox

Join Medium for free to get updates from this writer.

Remember me for faster sign in

I downloaded the RCE from exploit-db and ran the script using python. To get the reverse shell lets run nc on our local machine and lets take an reverse shell. Once we get the reverse shell we can read the user flag.

Now lets run linpeas. From linpeas I found an interesting directory.

On reading the file database.php in the directory got the root password.

Now login using root user and BOOM!! we got the root flag.

Thank you for reading. Hope you have found the blog helpful. Have a nice day. Happy Hacking!!!. Subscribe to the blog for more walkthroughs, tricks and bug bounty writeups.