Writeups

Tech_Supp0rt - TryHackMe CTF

Build Up:

Hack into the machine and investigate the target.

Please allow about 5 minutes for the machine to fully boot!

Note: The theme and security warnings encountered in this room are part of the challenge.

Answer the questions below
What is the root.txt flag?

Solution:

• nmap scan here
• smb smbd server found in port 139 so used smbmap to map out the server
• used smbclient to get into the smb server and found enter.txt

DB_NAME => wpdb
DB_USER => support
DB_PASS => ImAScammerLOL!123!

Used exploit.py to exploit.