Lunizz CTF Tryhackme Writeup

This is a Writeup of Tryhackme room “Lunizz CTF”

Room link: https://tryhackme.com/room/lunizzctfnd
Note: This room is Free

Enumeration

Rustscan

Directory Brute Forcing with Gubuster

We saw port 80 is open, so let’s brute force the directories and files which are exposed by this web server using ffuf:

gobuster dir -u http://10.10.106.159/ -w directory-list-2.3-medium.txt -x .php,.html,.txt

http://10.10.106.159/whatever

The “whatever” directory looks interesting as this indicates that we can run commands on the server,but the mode looks to be disabled:

/instructions.txt