TryHackMe / CTF
Jack — TryHackMe
Notes from the TryHackMe Jack room, with discovery screenshots and the first steps through the lab.
Enumeration
git clone https://github.com/Dionach/CMSmap
python3.8 CMSmap.py 'http://jack.thm'User enumeration
We can see that WordPress is running and that there are three users. XML-RPC is also enabled, which means we can try a brute-force attack.