Anthem

https://tryhackme.com/room/anthem

Open Ports:

• 80: http
• 135: msrpc
• 139: netbios-ssn
• 445: microsoft-ds
• 3389: ms-wbt-server

Gaining Access:

1. Found Admin name from the poem via google a. hence username: sg b. Password: inside /robots.txt

2. Connecting to machine:

User Flag:

Priviledge Escalation:

1. Do view hidden files a. Under C:\ in backup

   b. Add permission to restore file

   c. Inside restore file we find the passowrd to the Administrator
   

2. Moving to Admin a. Desktop >

Root Flag:

Miscellaneous Flags:

1. 1st flag:
2. 2nd flag:
3. 3rd flag:
4. 4th flag: