Room 404 | TryHackMe

TASK 2: Room 404

Firstly, I read description carefully, But there is only mentioned about port 8080 http.

So, I opend it, http://:8080

There is nothing interesting found. I tried to look at source-code. But it was also clean.

Then, I ran Gobuster and Subfinder for directory bursting and subdomain enumeration, but still nothing useful.

But, Nmap helped me to find something useful — /.git

nmap -sV -sC -p8080

After that much enumeration, I got something in /.git but I need to dump (also mention in lab) it to read easily.

Firstly, I downloaded the repository via wget.

wget -r

Now, You will need a tool git-dumper to dump it. You can find this tool in Github.

https://github.com/arthaud/git-dumper

Run it:

I found lot of things and stored them in directory — recovered_repo.

Then, I checked them one-by-one and finally found flag in README.me

LAB SOLVED!