VulnNet Tryhackme Writeup

Room link: https://www.tryhackme.com/room/vulnnet1
Note: This room is Free

Enumeration

Before we start enumerating the box, add the following line to your /etc/hosts file.

echo “10.10.236.130 vulnnet.thm” >> /etc/hosts

Enumeration

There are 2 open ports. Port 22 is used for SSH, and port 80 serves a web server. We start by enumerating the web server. Browsing to http://vulnnet.thm/ we find the following page:

Lets inspect the source code of the web apge

we see two strange JavaScript files.

Now we use LinkFinder to find links in JavaScript files. Run the following commands to find the hidden links:

git clone https://github.com/GerbenJavado/LinkFinder.gitpip3 install -r requirements.txt
python3 linkfinder.py -d -i http://vulnnet.thm/ -o cli