ColddBox Easy Tryhackme Writeup

This is a Writeup of Tryhackme room “ColddBox Easy”

Difficulty level: Easy
Aim: Hack this machine and obtain the user and root flags.

THM: https://www.tryhackme.com/room/colddboxeasy

VulnHub: https://www.vulnhub.com/entry/colddbox-easy,586/

An easy level machine with multiple ways to escalate privileges.

Information Gathering

Target: 10.10.196.79 in my case

and then a further scan to run default scripts and version detection on the discovered ports:

nmap -sC -sV -vvv -p 80,4512 10.10.196.79

From this we can see the following ports and services:

• port 80/tcp — HTTP — (Apache httpd 2.4.18 — running a WordPress blog)
• port 4512/tcp — SSH — (OpenSSH 7.2p2)

Enumeration