Slingshot

Prompts and answers

• What was the attacker's IP?
  10.0.2.15
• What was the first scanner that the attacker ran against the web server?
  Nmap Scripting Engine
• What was the User Agent of the directory enumeration tool that the attacker used on the web server?
  Mozilla/5.0 (Gobuster)
• In total, how many requested resources on the web server did the attacker fail to find?
  1867
• What is the flag under the interesting directory the attacker found?
  a76637b62ea99acda12f5859313f539a
• What login page did the attacker discover using the directory enumeration tool?
  /admin-login.php
• What was the user agent of the brute-force tool that the attacker used on the admin panel?
  Mozilla/4.0 (Hydra)
• What username:password combination did the attacker use to gain access to the admin page?
  admin:thx1138
• What flag was included in the file that the attacker uploaded from the admin directory?
  THM{ecb012e53a58818cbd17a924769ec447}
• What was the first command the attacker ran on the web shell?
  whoami
• What file location on the web server did the attacker extract database credentials from using Local File Inclusion?
  /etc/phpmyadmin/config-db.php
• What directory did the attacker use to access the database manager?
  /phpmyadmin
• What was the name of the database that the attacker exported?
  customer_credit_cards
• What flag does the attacker insert into the database?
  c6aa3215a7d519eeb40a660f3b76e64c