CyberHeroes on TryHackMe (THM)

Intro

Hello! Let’s prove our merit to be part of the elite club of CyberHeroes.

Upon deploying the attached machines, I went to http://MACHINEIP

I got this webpage. Then, I clicked on the menu. The menu showed three (3) links to other webpages: Home, About, Login

I clicked on login, and this took me to the login page.

No hints on the usernames or passwords on this page. So I checked the source page to see if there could be any hint. And yes! I got something.

Looking carefully at the <script> tag, I saw the authentication values.

a (which is the ‘uname’) = h3ck3rBoi

b (which is the ‘pass’) = RevereString(54321@terceSrepuS)

To get the password, reverse the value “54321@terceSrepuS” which is “SuperSecret@12345”, and login with the username and the reversed pass value.

Voila! You got the flag . We have made it to the elite of CyberHeroes.

Hope you enjoyed the room!

Thanks for reading. We see next time. #winks