Overview Module 2 of TryHackMe’s Pre-Security path covered the foundational concepts of IT and computing across four rooms. Most of this was conceptual rather than hands-on — building the mental m...
The Goal A setuid binary called suconnect connects to a port on localhost. If it receives the correct password for bandit20, it sends back bandit21’s password. The challenge: you need a listener r...
The Goal Use a setuid binary in the home directory to read the password file for bandit20 — a file that bandit19 cannot access directly. What I Did Listed the home directory and found a binary c...
The Goal The password is in a file called readme in the home directory. The problem: .bashrc has been modified to log you out immediately when you SSH in, before you can run any commands. What I ...
The Goal Two files in the home directory: passwords.old and passwords.new. Both contain hundreds of lines. One line has changed between them. Find the changed line in passwords.new — that’s the pa...
The Goal Find which port in the range 31000-32000 on localhost is running an SSL/TLS service that will return the next credentials when given the current password. The other ports either don’t spe...
The Goal Same as the previous level — submit the current password to a port on localhost — but this time the connection must use SSL/TLS encryption. Plain nc won’t work here. What I Did Read the...
The Goal Submit the current level’s password to a service running on port 30000 on localhost. It will return the next password. What I Did Logged in as bandit14 and tried nc --help to understand...
The Goal No password this time. Instead, bandit13’s home directory contains a private SSH key for bandit14. Use it to log in as bandit14 and read the password from /etc/bandit_pass/bandit14. What...
The Goal data.txt is a hexdump of a file that has been repeatedly compressed. Reverse the hexdump, then decompress layer by layer until you reach plain text. What a Hexdump Is A hexdump represen...