En-pass Tryhackme Writeup

Room link: https://tryhackme.com/room/enpass
Note: This room is free

Nmap Scan

We have only two ports open. SSH is running on port 80 and a HTTP server is running on port 8081 and the banner is telling us this is a ubuntu box. Since there is not much to look into the SSH service, let us start the enumeration with HTTP service on port 8001

HTTP service on Port 8001

Gobuster

gobuster dir -u http://10.10.200.74:8001/ -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -x php,txt,html

Gobuster on /web

gobuster dir -u http://10.10.200.74:8001/web -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -x php,txt,html