My TryHackMe Writeups

Writing THM excersise solvings here and my thoughts on how to solve them

Project maintained by NaystyX Hosted on GitHub Pages — Theme by mattgraham

Wonderland

https://tryhackme.com/room/wonderland

First I start with nmap as always to find what ports are in use

Also running a gobuster on the http server.

After reading Follow the white rabbit and seing the first directory be /r/, I thought of trying /a and so on and got to /r/a/b/b/i/t/

Going to view page source I saw alice:HowDothTheLittleCrocodileImproveHisShiningTail which could be ssh login.

I can run the walrus_and_the_carpenter.py but I cannot edit it. Also going to /root/ folder I found the user.txt flag.

Viewing the walrus and the carpenter show it importing random which game me the idea to create random.py that would run in the walrus py file.

And this game me the rabbit role.

Reading the file I see this

So I though of doing a file date

Hatters password: WhyIsARavenLikeAWritingDesk?

Then I decided to run LinPeas to find priviledge escalation types.

Searching in GTFOBins I found a match.

And escalating my priviledges I got the root access and found the last flag

Definitely on the harder side but also familiar types that I used to crack the machine.