TryHackMe LoFi Writeup: Complete Walkthrough and Solution

0xodinx

 LoFi - Tryhackme Writeup

LoFi - Tryhackme Writeup -DP1H3R0X


Problem :-


1. Climb the filesystem to find the flag!


Solution :-


Step 1 :-

 

First, I started the virtual machine (VM) and accessed the website hosted on it. The website appeared to be built with basic functionality and offered minimal features, which indicated it might not be well-secured.


accessed the website hosted on it



Step 2 :-


I then started looking for vulnerabilities on the website and identified a GET parameter(?page=). I tested various injection techniques, including SQL injection and local file inclusion (LFI). After several attempts, I successfully identified (LFI) vulnerability.

 

identified a GET parameter(?page=)

 

 

successfully identified (LFI) vulnerability.




Step 3 :-


After exploiting the LFI vulnerability, I navigated through the server's file system and located the flag. The retrieved flag was successfully captured, completing the challenge.


 

flag was successfully captured, completing the challenge

 

 

Thank You For Reading This Writeup









0 Comments