Writeups

THM Machines:

These are write-ups of some machines I’ve tried:

1. agentsudoctf
2. Anonymous
3. BiteMe
4. BountyHacker
5. Cyborg
6. DogCat
7. Ignite
8. Inclusion
9. LazyAdminFinal
10. LinuxPrivilegeEsclation
11. PickleRick
12. Relevant
13. RootMe
14. Tech_Supp0rt
15. TheMarketPlace
16. tomghost
17. UltraTech
18. WonderLand

Tips for THM Rooms:

1. Firstly, scan all the ports using nmap and observe/analyse the scan result.
2. If HTTP server found check for the directories using tools like gobuster.
3. Look if any of the services of the open ports are exploitable in the exploit-db or any other medium.

Useful Tools:

• LinPeas.sh - Looks after the binary and tools which can be used to escalate privilege in Linux.

• LinEnum.sh - Enumerate the Linux Kernel

• Hydra - Bruteforcing the servers with usernames and passwords

• Binwalk - Firmware Extraction Engine specially useful for stegnography

• Strace - Debugging and troubleshooting programs in Linux.

• linux-exploit-suggester-2.pl - Looks for kernel exploit in Linux