Member-only story

TryHackMe — Bounty Hacker

Hafiq Iqmal
3 min readApr 7, 2021

--

Having fun with TryHackMe again. So, here is the write up and guideline to pass this Bounty Hacker challenge.

Room: https://tryhackme.com/room/cowboyhacker
Level: Easy

Task: You talked a big game about being the most elite hacker in the solar system. Prove it and claim your right to the status of Elite Bounty Hacker!

Lets get started

As usual, start the machine and open the IP in browser

There is a message but nothing special here. “Who wrote the task list?” I randomly test Jet and Ein but its not the correct one. Nevermind, try rustscan then,

# rustscan -a 10.10.192.X -u 5000 -- -sV -T4 -A
Open 10.10.192.X:21
Open 10.10.192.X:22
Open 10.10.192.X:80
21/tcp open ftp syn-ack vsftpd 3.0.3
| ftp-anon: Anonymous FTP login allowed (FTP code 230)
...
...
22/tcp open ssh syn-ack OpenSSH 7.2p2 Ubuntu 4ubuntu2.8 (Ubuntu Linux; protocol 2.0)
...
...
80/tcp open http syn-ack Apache httpd 2.4.18 ((Ubuntu))
...
...

There is 3 port opened and FTP is open for anonymous login. Using cyberduck,

--

--

Hafiq Iqmal
Hafiq Iqmal

Written by Hafiq Iqmal

Technical Lead | Software Engineer | Laravel Enthusiasts | Tech writer | UiTM Alumni | Husband | Proud father of a beautiful daughter

No responses yet