Try Hack Me: Glitch

Today we are going to take a look at Glitch on Try Hack Me, which can be found here:

TryHackMe | GLITCH

The machine is rated as easy, and with a little enumeration it was not too bad. Lets start off with a RustScan:

We see that port 80 is open, lets do some of our inital reconnisance:

We see that their is an /api/access function:

Now we got a token, and it looks like base64:

Now that we have …

access api bad base64 cookie curl enumeration function glitch hack hacking machine port rustscan start token tryhackme value