AttackerKB

Walkthrough summary

AttackerKB TryHackMe walkthrough with 10 answered prompts and lab methodology notes.

Sample prompts covered

• Scan the machine with Nmap. What non-standard service can be found running on the high-port?
  Open the walkthrough page to inspect the full answer and command flow.
• Further enumerate this service, what version of it is running?
  Open the walkthrough page to inspect the full answer and command flow.
• Visit the webpage generated by this service. You should encounter an error due to SSL being present. Change the URL to use HTTPS and ignore the exception. After this, view the certificate. What hostname can we find on the cert details? On Firefox, you can view this by clicking on the 'i' in the URL, then the '>' in Connection, 'More Information', and then 'View Certificate' on the Security tab.
  Open the walkthrough page to inspect the full answer and command flow.
• Take a look through the Assessments for this vulnerability. As an attacker, we can use the information posted here by other members to determine how value an exploit might be and any tweaks we might have to make to exploit code. Similarly, as a defender we can leverage these comments to gain additional situational information for vulnerabilities, allowing us to gauge how quickly we need to patch them. Which version of Webmin is immediately vulnerable to this exploit?
  Open the walkthrough page to inspect the full answer and command flow.
• What type of attack was this? Note, we're looking for how this was added to the code for Webmin, not how this results in remote code execution (RCE).
  Open the walkthrough page to inspect the full answer and command flow.