#Tryhackme burp suite walkthrough code
#Tryhackme burp suite walkthrough password

Once we click the forward button, it will direct to the Dashboard page such as below:

#Tryhackme burp suite walkthrough code

We need to remove the redirection code from the request payload to look exactly like the screenshot above. So, we have to disable the redirection code by using the burp suite community. However, the Dashboard will re-directed to a different page when we key-in the username and password. Let’s login the Dashboard via credentials that we gained.

#Tryhackme burp suite walkthrough password

We have gotten the username and password for the WordPress credentials. Wpscan –url internal.thm/wordpress/ -e u admin -p /usr/share/wordlists/rockyou.txt We have successfully gained the username for the wordpress login, finally we can retrieve the password for the username “admin”

The command that we can used here as follows: Firstly, we need to retrieve the username before proceed with cracking of the password. This website looks more like WordPress theme, so let’s run wpscan to guess the username and password. In order to make the error disappear, we have to modify the hosts file at /etc/hostsĪfter we have modified the host file, let’s access the website using internal.thm/blog to see if it works! Once we have clicked the link, the website has shown the 404 pages which it’s odd for those websites. However, i notice there is a link to Internal and let’s click the link to see where the link directed. The interface doesn’t look attractive for a website that used for blog purpose. Let’s dive deep into the website interface Let’s run some enumerate activity on the website itself and see the result if there’s anything that we can access by running the command dirb įrom the output, i notice that /blog and /wordpress is been installed on the machine. When i open the website using the normal way, we have directed to a Default Page of Apache2

Now, we have to enumerate the details on the machine to see what has been configured inside by running nmap -sC -sV -PNįrom the nmap output above, i just notice that the port open for the machine can be listed as The following is the scenario of the room itself.Īs usual, we will need to deploy the machine in order to play with it. This room have been labelled as difficulty rated HARD In this room, we will do role play in Blackbox Penetration Testing where it will involve a real-life scenario. Today, I will guide on doing Internal Challenges Room.