Psycho Break

Try Hack Me

Introduction

Enumeration

We always start scanning our IP to find open ports with NMAP.

Let's check the web page:

Source page:

Let's go to /sadistRoom and click here

And the new page:

Let's Decode:

We will enter the code clicking on here. And we get:

Let's check the page and run Google Reverse Image:

Now we can use the key to get to the Abandoned Room click Go Further than check the Source Page than use the ?shell=ls command as it suggests. In order to go to the next phase we will use the ls .. which will show a hash to enter a page with a zip and txt file.

Let's unzip the file and we will use this tool for the wav file and use the passcode to extract the txt file for the ftp credentials:

Let's log in to the ftp, extract the files, and write a script (took it from another writeup bcz wasn't feeling in the mood of doing myself 😊) to run the program and dict files:

Let's use this tool to decode:

Exploitation

USER.TXT

Now let's ssh with the passcode:

ROOT.TXT

Let's be root: