Brute It-TryHackMe-Writeup

Learn how to brute, hash cracking and escalate privileges in this box!

The challenging room in the beginners path the in Brute It in Tryhackme that involves brute force, hash cracking, and privilege escalation. This box was pretty straightforward and didn’t have any rabbit holes to exploit this machine.

I think this could be helpful for CEH preparation, this is not too complex.

Connect to the TryHackMe network, and deploy the machine.

How many ports are open?

Answer- 2 Ports (22 & 80)

What version of SSH is running?

OpenSSH 7.6p1

What version of Apache is running?

2.4.29

Which Linux distribution is running?

Ubuntu

What is the hidden directory?

/admin

We didn't see anything interesting here there is just login page lets check source code

here the username is “admin”.

I tried to login with a random password to get the error message, when the login fails.

We can brute force the HTTP post form using Hydra, its look like login form.

We got the login id and password ! lets loggin in

With the brute-forced password now we can log into the admin page and grab the first flag

It looks like the RSA private key, we can crack the RSA private key using the John The Ripper tool.

Save rsa_key into key_text file and convert it for john.
Then crack the passphrase.

And I got the password for the RSA private key.

Now try to login john ssh, As soon as we open the ssh, we can see the user.txt flag.

BOOM! We Got the SHELL !

To get root flag we need to check what permissions or privileges do we have

This one is a little bit tryckier. First type in the command

We can use cat to find out the hashes of user’s passwords.

Using the John the Ripper, crack the hash for the root user. Store the hash in one file and crack it.

And now we have the password for the root user. Let’s escalate our privileges as a super user.

Finally we got our ROOT flag !!!

Now we have all our Answers let’s submit it and we have successfully completed our CTF !!

Keep Trying, Keep Working :)

Thank you for Reading!!

Happy Hacking

Tryhackme , ctf , root , nmap , elevation , root.txt , cat.txt , machine , writeup , solution , walkthrough , flag , xploit ayush , Brute It