Tryhackme-Simple CTF

Simple CTF

Task1

1.How many services are running under port 1000?

2.What is running on the higher port?

ssh

3.What’s the CVE you’re using against the application?

CVE-2019-9053

NVD - CVE-2019-9053 (nist.gov)

4.To what kind of vulnerability is the application vulnerable?

SQLi

5.What’s the password?

secret

6.Where can you login with the details obtained?

ssh

7.What’s the user flag?

G00d j0b, keep up!

8.Is there any other user in the home directory? What’s its name?

sunbath

9.What can you leverage to spawn a privileged shell?

vim

10.What’s the root flag?

W3ll d0n3. You made it!

10.What’s the root flag?

W3ll d0n3. You made it!