Try Hack Me: Advent of Cyber 2021 - Day 3

Play this TryHackMe Room with me tryhackme.com/...
Hi everyone, something a bit different this week, I've worked with TryHackMe to produce a little walkthrough of their day 3 challenge, don't worry if you've not started it's only day 3 and you can totally catch up! If you're not already using TryHackMe it's a CTF/learning platform for learning a bunch of security topics, and if you're used to learning in school you'll probably vibe really well. There are distinct learning paths that they take you through and each one is a little tutorial with some questions at the end. It's really affordable and has a student discount. Full disclosure: This video was not paid for by TryHackMe, I just like the website and said yes when they asked for some help with making videos. They did send me some swag, but that's all.
For more information on the event and giveaway check out tryhackme.com/...

[@elluviot6346]

Thank you for the explanation. Also small things like when backing out of a directory saying that you are using the hotkey 'Q', really helps!!

[@sylwiacelejewska7813]

hey! its really hard to see anything on your screen, could you please add a better quality screens or so?

[@shiva420]

is possible you increase your zoom% in these? Content on your screen is extremely hard to see.

[@infotechyeti]

Hi new to the channel. Great video and audio but very hard to see your typing.

[@publicpariah6393]

Wish the text was a bit bigger

[@flashbrutal]

I think this challenge isn't public yet... please let me know...I saw my dashboard still has day 2

[@maheshchandra452]

it is released now check it again

[@MarcoMassieri]

pretty cool activities !! I learn a lot with this room. Thanks for your video.

[@CHAP_SEC]

Good room as a reminder of some good tools and importance of changing defaults

[@n8sdesign]

Thanks Katie! Very easy to follow along and learn a few new tricks along the way, Cheers 🍻

[@phantom18x]

Thanks for this!

[@theo6580]

Thank you for the walk through!

[@l0v3MyB3ar]

Thanks THM; a fun way to learn.
BUT - the idea of manually "trying" various passwords is the opposite of the goal of this room IMO, especially since it states "we can use tools to do this process for us at a considerably faster rate". I tried ffuf [which I was introduced to through THM - thanks!] but to no avail. Can someone offer suggestions on how to use a tool [vs guessing] to discover administrator's password?

[@InsiderPhD]

I wouldn’t usually “guess” passwords either but it’s always worth checking admin/admin or googling for default passwords if it’s a deployable software because it takes a few secs but can be really useful. If you want to brute force you can try the rockyou.txt password list with something like ffuf or intruder. It’s also on THM and the attack box

[@thibdeved]

You can try with Brup and the intruder. You intercept the post request, send it to the intruder and with a payload (wordlist in burp), you can try a list of password.
In the case of the event, I was able to find the password in the folder admin in a javascript file. I don't remember the name exactly but it was in the admin folder of the webserver. It was possible to find the password in a simple else/if statement :)
Happy Christmas-hacking :D

[@Z3kyTw0]

Great explanation! Thank you for uploading

[@mrs4560]

For some reason when typing in the machine address to view the web page I get an error and the page doesn't load :/. Anyone else get this issue? I had to get the answers from this video but still learned a bit from this.

[@Blentux]

For me, the page didn't load as well. I stopped the page from loading and then it appeared. Don't know why. For a reason, it doesn't stop loading while showing nothing until I stopped it from loading and the page appears. Then I could do the task.

[@jonnysokkoatduckdotcom]

Whats really funny is when i tried to use firefox with try hack me IT LOOKED NOTHING LIKE THE THE EXAMPLES ON THE SCREEN THAT THEY SHOW YOU!!

[@redbeardjunior]

I love it ! did it today

[@Macj707]

just now got here...
chef wuz here

[@m4rt_]

In norway advent calanders are realy common

[@JuanBotes]

thanks for the content \o/

[@sachinfulsunge9977]

Hey, can you do a series of web security academy of portswigger? Its hard for me to understand even with the solutions and don't seem to find descriptive solution on youtube

[@InsiderPhD]

Yes! Totally will :D

[@kasta851984]

Great explanation thanks !!

[@jorgevilla6523]

Thanks for the video.

[@sharky9493]

Well done! Thank you! made a abo!

[@frosecold]

This one was too ez

[@MrDrapski]

volume is way too low but thanks anyway :)

[@b33b3k]

cOOL!

[@QueenofWheels]

This one was hard for me

[@rayanjames3050]

More cool stuff

[@jonnysokkoatduckdotcom]

Its not as easy as they say it is

[@J0MZ]

احبش

[@ShyamSundar-tg2cj]

tq for your kind information i love it