Learn Cyber Security | TryHackMe Cyber Training
Maxwell Bwire — Technical Support Technician
Completed: Guided Pentest: Infrastructure | TryHackMe
I've completed the Guided Pentest: Infrastructure room on TryHackMe, where I practised the main stages of an infrastructure penetration test, from enumeration to privilege escalation.
What I worked on
-Nmap: Scanned the target to identify open ports, running services, and service versions.
- Searchsploit: Researched potential vulnerabilities in the discovered services and looked for relevant public exploits.
-Metasploit: Used an exploit targeting a vulnerable UnrealIRCd service to gain initial access to the machine.
-Linux enumeration: Investigated files on the compromised system to identify information that could help me escalate privileges.
-Privilege escalation: Discovered root credentials stored in a plaintext file and used SSH to obtain root access.
Key lessons learned
This room helped me understand how the different stages of a penetration test connect. Enumeration gave me information about the target, vulnerability research helped me identify a potential attack path, and exploitation allowed me to gain an initial foothold.
One important takeaway was that privilege escalation doesn't always require a complicated exploit. Poor credential management, such as storing passwords in plaintext where low-privileged users can read them, can be enough to compromise an entire system.
I also learned the importance of documenting findings clearly, explaining their impact, and providing practical remediation recommendations. Finding a vulnerability is only part of the job; communicating the risk and helping the organisation fix it are just as important.
I'm continuing to build my practical skills in Linux, network security, vulnerability assessment, and ethical hacking through hands-on labs.
One lab at a time, one skill at a time.
https://tryhackme.com/room/guidedpentestinfrastructure?utm_campaign=social_share&utm_medium=social&utm_content=share-completed-room&utm_source=copy&sharerId=655d96c352a0274bde57b2bf
#Cybersecurity #EthicalHacking #PenetrationTesting #TryHackMe #Linux #PrivilegeEscalation #LearningInPublic
6 reactions · 0 comments
Topics: #tryhackme, #ethicalhacking, #penetrationtesting, #learninginpublic, #privilegeescalation, #cybersecurity, #linux