En-pass — TryHackMe

This is the write-up for TryHackMe’s room named En-pass: Get what you can’t.This room can be found at this URL:

https://tryhackme.com/room/enpass

Enumeration

NMAP

# Identify the list of services running on the target machine
⇒ sudo nmap -sS -Pn -T4 -p- 10.10.248.167

# Perform further information gathering on the open ports identified above
⇒ sudo nmap -O -A -Pn -T4 -p22,8001 10.10.248.167

So we have SSH at port 22 and a Website at port 8001. First let’s explore the website.Open it up in your favorite browser and we see some images and some text printed on them.We can view all these text by doing view source on the web page:

Ehvw ri Oxfn!! is Caesar Cipher for Best of Luck with shift value of 3