THM: Gaining Access to the Library Server

THM Room Link: https://tryhackme.com/r/room/bsidesgtlibrary

Initial Reconnaissance

Nmap Scan:

sudo nmap -sV -sS -A <IP>

Open Ports

• 22/tcp: OpenSSH 7.2p2 Ubuntu 4ubuntu2.8
• 80/tcp: Apache httpd 2.4.18 (Ubuntu)

Gobuster:

gobuster dir -u http://<IP>/ -x php,txt -w /usr/share/wordlists/dirb/common.txt -t 50

No interesting directories were discovered, however, I found robots.txt which hints that I need to brute-force attack

Information Gathering

On Inspection of the website closely, I found a potential username that could be the username for SSH which is open …

thm-writeup