Tryhackme-RootMe

• • RootMe
  • • Task1 Deploy the machine
    • Task2 Reconnaissance
    • Task3 Getting a shell
    • Task4 Privilege escalation

Deploy the machine

1.Scan the machine, how many ports are open?

2

2.What version of Apache is running?

2.4.29

3.What service is running on port 22?

ssh

4.Find directories on the web server using the GoBuster tool.

5.What is the hidden directory?

/panel/

在http://IP/panel页面上传后缀为php5的文件绕过限制,反弹shell成功

user.txt

THM{y0u_g0t_a_sh3ll}

1.Search for files with SUID permission, which file is weird?

/usr/bin/python

find / -user root -perm /4000

2.Find a form to escalate your privileges.

3.root.txt

THM{pr1v1l3g3_3sc4l4t10n}

-1632389193904)]

3.root.txt

THM{pr1v1l3g3_3sc4l4t10n}