Knowledge Hub
MAL: Strings
TryHackMe13 answered prompts
MAL: Strings TryHackMe walkthrough with 13 answered prompts and lab methodology notes.
Prompts and answers
-
What is the name of the account that had the passcode of "12345678" in the intellian example discussed above?
intellian
-
What is the CVE entry disclosed by the company "Teradata" in their "Viewpoint" Application that has a password within a string?
CVE-2019-6499
-
According to OWASP's list of "Top Ten IoT" vulnerabilities, name the ranking this vulnerability would fall within, represented as text.
one
-
What is the correct username required by the "LoginForm"?
cmnatic
-
What is the required password to authenticate with?
TryHackMeMerchWhen
-
What is the "hidden" THM{} flag?
THM{Not_So_Hidden_Flag}
-
What is the key term to describe a server that Botnets recieve instructions from?
Command and Control
-
Name the discussed example malware that uses "strings" to store the bitcoin wallet addresses for payment
Wannacry
-
What was the date of the first transaction made in the Bitcoin wallet of the "WannaCry" developers?
5/12/2017
-
What is the Bitcoin Address stored within "ComplexCalculator.exe"
1LVB65imeojrgC3JPZGBwWhK1BdVZ2vYNC
-
What is the name of the toolset provided by Microsoft that allows you to extract the "strings" of an application?
Sysinternals
-
What operator would you use to "pipe" or store the output of the strings command?
>
-
What is the name of the currency that ransomware often uses for payment?
bitcoin