TryHackMe | Battery | WALKTHROUGH
The article provides a walkthrough for a TryHackMe security lab titled 'Battery'. It details the steps taken to perform reconnaissance using tools like Nmap and Gobuster to identify vulnerabilities. The walkthrough highlights various findings, including open ports and potential security issues in the web application.
- ▪The lab has a medium difficulty level and targets specific flag files.
- ▪Nmap was used to scan for open ports, revealing SSH and HTTP services.
- ▪Gobuster was employed to discover hidden directories on the web server.
Opening excerpt (first ~120 words) tap to expand
try { if(localStorage) { let currentUser = localStorage.getItem('current_user'); if (currentUser) { currentUser = JSON.parse(currentUser); if (currentUser.id === 3915253) { document.getElementById('article-show-container').classList.add('current-user-is-article-author'); } } } } catch (e) { console.error(e); } Mikail Kakabayev Posted on May 23 TryHackMe | Battery | WALKTHROUGH #security #learning #testing LAB:** Battery DIFFICULTY: Medium TARGET: flag1.txt, flag2.txt, root.txt TOOLS: Nmap, Gobuster, BurpSuite VULNERABLE: SQL Truncation Attack, XML External Entity Injection First, let's do some recon using NMAP: -sC - Default script scan -sV - Version detection -O - OS detection sudo nmap -sC -sV -O {LABS_IP_ADDRESS} Enter fullscreen mode Exit fullscreen mode Starting Nmap 7.98 (…
Excerpt limited to ~120 words for fair-use compliance. The full article is at DEV.to (Top).
Discussion
0 commentsMore from DEV.to (Top)
