TryHackMe’s Offensive Security Intro’s Write-Up
This write-up covers the TryHackMe lab ‘Offensive Security Intro’. It demonstrates basic offensive techniques, including directory…
TryHackMe’s Offensive Security Intro’s Write-Up
This write-up covers the TryHackMe lab ‘Offensive Security Intro’. It demonstrates basic offensive techniques, including directory enumeration and interacting with a web application to find flags.
Task 1:
- Which of the following options better represents the process where you simulate a hacker’s actions to find vulnerabilities in a system? — Answer: Offensive Security
Task 2:
- Start the lab
- What is your bank account number in the FakeBank web application? — Answer: 8881 (visible on the app’s top-left corner)
Task 3:
- Open the terminal.
- DIRB is a tool used in cybersecurity to find hidden directories and files on a website.
- Tools like DIRB perform a brute-force attack using a wordlist of common directory and file names that are typically part of a website’s structure, attempting to discover hidden pages or files.
- In this case it is being used without using a specified wordlist and using its own standard wordlist located at /usr/share/dirb/wordlists/common.txt (which may not be an effective one).
- Use it like so (via terminal): dirb http://fakebank.tbh
- Two directories were found: — http://fakebank.thm/bank-deposit — http://fakebank.thm/images
- Dirb should have found 2 hidden URLs. One of them is
http://fakebank.thm/images. What is the other one? — Answer: http://fakebank.thm/bank-deposit
Dirb’s screenshot
**Task 4:
- **Visit the deposit link (http://fakebank.thm/bank-deposit) using your browser.
- It will grant access to a Staff Account directory with deposit permissions.
Staff Account page
— Select your account number (Task 2) and deposit value.
Account number and deposit value inserted.
— Make the deposit.
Deposit completed.
— Return to your account and get the flag.
-
If your balance is now positive, a pop-up should appear with some green words in it. Input the green words as the answer to this question (all in uppercase). — Answer: BANK-HACKED
-
DIRB is a tool used in cybersecurity to find hidden directories and files on a website.
메타데이터
- post_id
- 32d630b2c52a
- slug
- tryhackmes-offensive-security-intro-s-write-up-32d630b2c52a
- url
- https://medium.com/@pjsminit/tryhackmes-offensive-security-intro-s-write-up-32d630b2c52a
- canonical_url
- https://medium.com/@pjsminit/tryhackmes-offensive-security-intro-s-write-up-32d630b2c52a
- author_url
- https://medium.com/@pjsminit
- status
- ok
- fetched_at
- 2026-06-20 20:29:01
