ToolsRus — TryHackMe WriteUp

Practise using tools such as dirbuster, hydra, nmap, nikto and metasploit

First I ran the Nmap default to find open ports

Did another scan for services and default vulnerabilities

Start enumerating the servives found starting with port 80. I accessed it via browser

I tried robots.txt first but there was nothing

So I ran Dirbuster Tool and found the directory /guidelines

On viewing it

There was another hidden dir named /protected that required authentication. We found a user bob

We running hydra to get the password and the username provided is bob

The password is bubbles. We log in we get:-

From the above message we have to enumerate the remaining ports to find more details. I went for port 1234 that had another web service. It was running apache Tomcat/Coyote JSP Engine 1.1

Get Wilklins Nyatteng’s stories in your inbox

Join Medium for free to get updates from this writer.

Remember me for faster sign in

I used Metasploit to exploit the web server. I started by searching for tomcat

I selected option 7,

We then use options to use to fill the missing parameters

We then run to exploit and get a meterpreter. Then request for a shell

We then get a session then run id to find the current user and locate the flag