TryHackMe Simple CTF [MACHINE]

Machine Name : Simple CTF

Platform : TryHackMe (THM)

Machine Link : https://tryhackme.com/room/easyctf

Question 1 - How many services are running under port 1000?

command : nmap -p 1-1000

Question 2 - What is running on the higher port?

command : nmap -A <target_ip>

Question 3 - What's the CVE you're using against the application?
Answer - Check The Web Application Service And Version . Search About It In Browser

/*When We Go Through The Web Application ,
 We Can See CMS 2.2.8
Type The Service And Version Name On Browser */

Question 4 - To what kind of vulnerability is the application vulnerable?
Answer - Read TheCVE

Question 5 - What's the password?

use the exploit : https://www.exploit-db.com/exploits/46635

Question 6 - Where can you login with the details obtained?
Answer - We Have Gathered The Username And Password From The Exploit , We Can Use A Service To Login TO It (command line Service)

Question 7 - What's the user flag?
Answer - When You Logged Into The System , You Can Find user.txt In The Desktop

Question 8 - Is there any other user in the home directory? What's its name?
Answer - Yes There Is Another User In The System 

Command : ls /home

Question 9 - What can you leverage to spawn a privileged shell?
Answer - sudo -l

Find A Command Which Allows You To Escalate Privilage (use gtfobin)

Question 10 - What's the root flag?

Answer - You Can Find The Root Flag From Root Folder