THM - Checkmate

A writeup for “Checkmate” on TryHackMe.

Exploit weak password practices across Marco’s internal systems to achieve full compromise.

This room involves a password security assessment against multiple services, all configured with weak credentials.

Checkmate

Disclaimer

The content of this article is for educational purposes only. Do not use the techniques described here on any system without the explicit consent of the owner.

For the challenge, we can follow the dashboard available on port 5000, which provides additional information on how to obtain each password.

What is the password for Level 1?

For the first password, we are told that the user has kept the default credentials for the firewall dashboard available at port 5001.

Looking at the website, we can see a simple HTML form that sends a POST request with the given…