Member-only story
Classic Passwd Tryhackme Writeup
This is a Writeup of Tryhackme room “Classic Passwd”
https://tryhackme.com/room/classicpasswd
Room link: https://tryhackme.com/room/classicpasswd
Note: This room is Free
Method-1 (ltrace)
Let’s do dynamic analysis. Dynamic analysis has to be done in a sandbox environment. There are some tools pre-installed in Linux that can be used to display more detailed information.
First, download the executable file. Check the file information using the following command
We could see that the file is an ELF 64-bit LSB pie executable. Let’s execute the file after providing required permissions.
After executing we can find that the binary asks for a “username”. Try executing with a random username, it result’s in authentication error means that we need to provide correct username inorder to get the flag.
Now let’s use ltrace, for dynamic analysis. ltrace is a program that simply runs the specified command until it exits. It intercepts and records the dynamic library calls which are called by the executed process and the…