Exploit Vulnerabilities | TryHackMe | Solutions
Exploit Vulnerabilities
Learn about some of the tools, techniques and resources to exploit vulnerabilities
Task1
1.1 ) Let’s proceed.
Correct Answer : No answer needed.
— — — — — — — — — — — — — — — — — — — — — — — — — — — — — — — —
Task2
1) You are working close to a deadline for your penetration test and need to scan a web application quickly. Would you use an automated scanner? (Yay/Nay)
Correct Answer : yay
— — — — — — — — — — — — — — — — — — — — — — — — — — — — — — — —
2) You are testing a web application and find that you are able to input and retrieve data in a database. What vulnerability is this?
Correct Answer : Injection
3) You manage to impersonate another user. What vulnerability is this?
Correct Answer : Broken Access Control
— — — — — — — — — — — — — — — — — — — — — — — — — — — — — — — —
Task3
1) What website would you use as a security researcher if you wanted to upload a Proof of Concept?
Correct Answer : github
Get Neharidha Murali’s stories in your inbox
Join Medium for free to get updates from this writer.
3) Bottom of Form
2) You are performing a penetration test at a site with no internet connection. What tool could you use to find exploits to use?
Correct Answer : Searchsploit
— — — — — — — — — — — — — — — — — — — — — — — — — — — — — — — —
Task4
1) What type of vulnerability was used in this attack?
Correct Answer : remote code execution
— — — — — — — — — — — — — — — — — — — — — — — — — — — — — — — —
Task5
1) Find out the version of the application that is running. What are the name and version number of the application?
Correct Answer : online book store v1.0
2) Now use the resources and skills from this module to find an exploit that will allow you to gain remote access to the vulnerable machine.
Correct Answer : No answer needed.
3) Use this exploit against the vulnerable machine. What is the value of the flag located in a web directory?
Correct Answer : thm{book_keeping}
— — — — — — — — — — — — — — — — — — — — — — — — — — — — — — — —
Happy Learning — Hope this helps you out :)
For in-depth solutions, check this out — https://github.com/neharidha?tab=repositories
-Neharidha Murali
— — — — — — — — — — — — — — — — — — — — — — — — — — — — — — — —
