TryHackMe “BiteMe” Write Up

Difficulty: Medium

As always I started with an nmap scan:

There are two ports, let’s open up the webpage.

It is an default Apache page. So I scanned the url endpoints here is the result:

dirb http://10.10.96.39/

Let’s look at “/console”:

In the source of this page I found an obfuscated java code so I deobfuscated it:

So this is the obfuscated code:

function handleSubmit() {
  eval(function (p, a, c, k, e, r) {
    e = function …

cybersecurity cybersecurity training red team tryhackme tryhackme-walkthrough