https://tryhackme.com/room/mrrobot

mrrobot.md

Mr. Robot CTF

• /robots
• /license (scroll down)
• upload reverse shell in wp
• brute force /home/robot/password
• login as robot
• Privilege escalation using nmap

nmap.md

☁  ~  nmap --min-rate=3000 -sV -sC -o nmap mrrobot.thm                                                                                      
Starting Nmap 7.94 ( https://nmap.org ) at 2023-09-16 15:36 CEST
Nmap scan report for mrrobot.thm (10.10.181.221)
Host is up (0.042s latency).
Not shown: 997 filtered tcp ports (no-response)
PORT    STATE  SERVICE  VERSION
22/tcp  closed ssh
80/tcp  open   http     Apache httpd
|_http-server-header: Apache
|_http-title: Site doesn't have a title (text/html).
443/tcp open   ssl/http Apache httpd
|_http-server-header: Apache
| ssl-cert: Subject: commonName=www.example.com
| Not valid before: 2015-09-16T10:45:03
|_Not valid after:  2025-09-13T10:45:03
|_http-title: Site doesn't have a title (text/html).

Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 18.97 seconds

robots.txt

User-agent: Googlebot
Crawl-delay: 10
Disallow:

User-agent: Mediapartners-Google
Disallow:

User-agent: Slurp
Crawl-delay: 10
Disallow:

User-agent: MSNBot
Crawl-delay: 10
Disallow:

User-agent: bingbot
Crawl-delay: 10
Disallow:

User-agent: ia_archiver
Crawl-delay: 10
Disallow:

User-agent: *
Disallow: /


-> /robots

User-agent: *
fsocity.dic <- Dictionary?
key-1-of-3.txt <- Key 1