MR-ROBOT: 1 Walkthrough

Enumeration

  1. SSH is closed.
  2. 80 and 443 — same on application layer.
  1. Manual Walkthrough
  • found a key on robots.txt

Finding Other Keys…

Now, we have many items in the fsocity.dic. To boil it down, i need to find the available users.

Finding valid Users
update the theme 404 to get Reverse shell
received the Reverse Shell
Use GTFOBins

--

--

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store
gowthamaraj(@fuffsec)

gowthamaraj(@fuffsec)

86 Followers

The world is full of obvious things which nobody by any chance ever observes.