Overview Module 3 of TryHackMe’s Pre-Security path covered operating systems across five rooms — OS fundamentals, Windows basics, Linux CLI, Windows CLI, and a practical privilege escalation exerc...
The Goal Another cron job running automatically. This time the script is more complex — it generates a filename using a hash and writes the password there. The challenge is figuring out what filen...
The Goal A program is running automatically at regular intervals via cron. Find what it does and use it to get the password for bandit22. What is Cron Cron is a time-based job scheduler built in...
Overview Module 2 of TryHackMe’s Pre-Security path covered the foundational concepts of IT and computing across four rooms. Most of this was conceptual rather than hands-on — building the mental m...
The Goal A setuid binary called suconnect connects to a port on localhost. If it receives the correct password for bandit20, it sends back bandit21’s password. The challenge: you need a listener r...
The Goal Use a setuid binary in the home directory to read the password file for bandit20 — a file that bandit19 cannot access directly. What I Did Listed the home directory and found a binary c...
The Goal The password is in a file called readme in the home directory. The problem: .bashrc has been modified to log you out immediately when you SSH in, before you can run any commands. What I ...
The Goal Two files in the home directory: passwords.old and passwords.new. Both contain hundreds of lines. One line has changed between them. Find the changed line in passwords.new — that’s the pa...
The Goal Find which port in the range 31000-32000 on localhost is running an SSL/TLS service that will return the next credentials when given the current password. The other ports either don’t spe...
The Goal Same as the previous level — submit the current password to a port on localhost — but this time the connection must use SSL/TLS encryption. Plain nc won’t work here. What I Did Read the...