Mr Robot CTF Walkthrough -TryHackMe Detailed I recently solved the Mr Robot CTF room on TryHackMe. The room is rated medium, but what I liked about it is that it connects a lot of basic penetration …

InfoSecWriteUps' platform is  dedicated to providing insights and resources for cybersecurity professionals and enthusiasts. Through articles, tutorials, and security research, InfoSecWriteUps offers insights into cybersecurity vulnerabilities, attack techniques, and defense strategies. Readers can learn about penetration testing, threat intelligence, and incident response to enhance their cybersecurity knowledge and skills.

InfoSec Write-ups

A detailed walkthrough of the Mr Robot CTF room on TryHackMe, covering the full attack chain from initial web enumeration to root access. Steps include checking robots.txt for hidden files, running Nmap and Gobuster scans, discovering WordPress credentials via Base64-encoded strings in page source, gaining a reverse shell through the WordPress Theme Editor, cracking an MD5 hash to switch users, and escalating privileges via an SUID-enabled old Nmap binary. An alternative credential-discovery method using Hydra against the WordPress login form is also covered.