Linux File System Analysis

Walkthrough summary

Linux File System Analysis TryHackMe walkthrough with 14 answered prompts and lab methodology notes.

Sample prompts covered

• After updating the PATH and LD_LIBRARY_PATH environment variables, run the command check-env. What is the flag that is returned in the output?
  Open the walkthrough page to inspect the full answer and command flow.
• To practice your skills with the find command, locate all the files that the user bob created in the past 1 minute. Once found, review its contents. What is the flag you receive?
  Open the walkthrough page to inspect the full answer and command flow.
• Extract the metadata from the reverse.elf file. What is the file's MIME type?
  Open the walkthrough page to inspect the full answer and command flow.
• Run the stat command against the /etc/hosts file on the compromised web server. What is the full Modify Timestamp (mtime) value?
  Open the walkthrough page to inspect the full answer and command flow.
• Investigate the user accounts on the system. What is the name of the backdoor account that the attacker created?
  Open the walkthrough page to inspect the full answer and command flow.