BIOHAZARD WALKTHROUGH | TRYHACKME

TASK 1 — INTRODUCTION

• Start from scanning.
• Run nmap scan to find open ports and version.

nmap -A <IP>

nmap

Open ports — FTP, SSH, HTTP.

Q1: How many open ports?

A: 3

Q2: What is the team name in operation?

A: STARS alpha team (found in http page)

TASK 2 — THE MANSION

• In <ip>/mansionmain/ , we got directory in comment, open it.

source code

• While investigating this, we got emblem flag.

emblem{fec832623ea498e20bf4fe1821d58727}

• And in its source code, we got a base64.

<!-- SG93IGFib3V0IHRoZSAvdGVhUm9vbS8= -->

• After decoding, we got new room.

How about the /teaRoom/

• Here, we got flag and another room.

lock_pick{037b35e2ff90916a9abf99129c8e1837}

• Here, we got some rooms to research.

artroom/MansionMap.html

• Open /barRroom with lockpick flag.

/barRoom

• In this, we got a string.

music flag

• After decoding it, we got music flag — music_sheet{362d72deaf65f5bdc63daece6a1f676e}
• Next, In diningroom2f, we got a rot13 line. After decoding:

You get the blue gem by pushing the status to the lower floor. The gem is on the diningRoom first floor. Visit **sapphire.html**

• Got other flag in /diningroom2f/sapphire.html

blue jewel flag

• Enter that music flag here, a new page will appear.

• Then we will get shield flag.

shield flag

• In /diningroom, submit emblem flag.
• We got a encrypted something, deocde it — — rebecca
• Go to /the_great_shield_key.html and u will get shield flag.

shiled flag

• Next /tigerStatusRoom, after giving gem flag in this room, we got:

a string

• Decrypt it — — RlRQIHVzZXI6IG

decrypt

• Next room is Gallerty Room.
• We got something similar to creast 1.

galleryRoom/note.txt

Decrypt it — — h1bnRlciwgRlRQIHBh

• Next room is Armour room.

armourRoom

• Submit shield flag. Then we got creast 3.

creast 3

• Decode it — — c3M6IHlvdV9jYW50X2h

cyberchef

• Next room is Attic room. Submit shield key.

articRoom

• Got similar like creast 1.

creast 4

• After decrypt — — pZGVfZm9yZXZlcg==
• Combine all 4 creast.

RlRQIHVzZXI6IGh1bnRlciwgRlRQIHBhc3M6IHlvdV9jYW50X2hpZGVfZm9yZXZlcg==

• Decrypt — — FTP user: hunter, FTP pass: you_cant_hide_forever

Q1: What is the emblem flag?

A:

Q2: What is the lock pick flag?

**A: **emblem{fec832623ea498e20bf4fe1821d58727}

Q3: What is the music sheet flag?

**A: **lock_pick{037b35e2ff90916a9abf99129c8e1837}

Q4: What is the gold emblem flag?

**A: **music_sheet{362d72deaf65f5bdc63daece6a1f676e}

Q5: What is the shield key flag?

**A: **gold_emblem{58a8c41a9d08b8a4e38d02a4d7ff4843}

Q6: What is the blue gem flag?

*A: *blue_jewel{e1d457e96cac640f863ec7bc475d48aa}

Q7: What is the FTP username?

*A: *hunter

**Q8: What is the FTP password? A: **you_cant_hide_forever

Task 3: THE GUARD HOUSE

• Login to FTP.

FTP

• In ftp we got some files and jpg.

Decode

• In these, we got 3 ecoded string, lets decode — — plant42_can_be_destroy_with_vjolt
• This string was key of helmet.gpg file.
• And we found helmet flag there.

Helmet Flag

• Put this key in /hidden_closet/ room.

/hidden_closet

• In this, we got ssh password — — T_virus_rules

SSH key

• There is no username here, lets find it in study room.
• We got a file in this room and open file, there is SSH user — — umbrella_guest

SSH User

Answer the questions below

Q1:What is the SSH login username?

**A: **umbrella_guest

**Q2: What is the SSH login password? A: **T_virus_rules

Q3: Who the STARS bravo team leader?

**A: **Enrico

TASK 4: THE REVISIT

• Login in SSH.
• Go to cd /.jailcell, we got a note there.

cd .jailcell

• We also got a note in /weasker user.

weasker_note.txt

• And password of weasker user — — stars_members_are_my_guinea_pig
• Nothing was working umbrella_guest user. So, we switched to weasker user.

weasker user

• Now do privilage escalation as we have passowrd of user.

sudo su

• Root flag — cat /root/root.txt

Answer the questions below

Q1: What is the SSH login username?

**A: **umbrella_guest

Q2: What is the SSH login password?

**A: **T_virus_rules

Q3: Who the STARS bravo team leader?

**A: **Enrico

TASK 5: UNDERGROUND LABORATORY

Answer the questions below

Q1: Where you found Chris?

**A: **jailcell

Q2: Who is the traitor?

**A: **weasker

Q3: The login password for the traitor?

**A: **stars_members_are_my_guinea_pig

Q4: The name of the ultimate form?

**A: **Tyrant

Q5: The root flag?

A: check yourself

LAB SOLVED.