TryHackMe: Cyborg

Having fun with TryHackMe again. So, here is the write up and guideline to pass this Cyborg challenge.

Room: https://www.tryhackme.com/room/cyborgt8
Level: Easy

Task: A box involving encrypted archives, source code analysis and more. Compromise the system.

Lets get started

As usual, open the browser with the machine IP

# gobuster dir -u 10.10.63.X -w ~/wordlists/dirb/big.txt -t 50
/.htpasswd            (Status: 403) [Size: 277]
/.htaccess            (Status: 403) [Size: 277]
/admin                (Status: 301) [Size: 312]
/etc                  (Status: 301) [Size: 310]
/server-status        (Status: 403) [Size: 277]

There is 2 path found. Let’s see /admin.

So far nothing special here. There is 3 names there, we take note first. There is also have downloadable zip file there. Download it first. For just in case, lets run again gobuster in this page

# gobuster dir -u 10.10.63.X/admin -w ~/wordlists/dirb/big.txt -t 50

Nothing found. Its okay then. Lets see /etc