Post cover image

July 31, 2026

Room 404 (THM) Tryhackme Walkthrough [Hacker Holidays : Day 2]

Description : He booked the quiet room. It’s not on the floor plan, not in the brochure, not on any door. But port 8080 is wide open, and…

By Lawvye

3 min read

Description : He booked the quiet room. It's not on the floor plan, not in the brochure, not on any door. But port 8080 is wide open, and the rooms it never lists are the ones worth finding.

Difficulty : Easy

Note : All of the content and images are from https://tryhackme.com/

Room : https://tryhackme.com/room/hh-room404-804573bf

Enjoy.

Task 1 Hacker Holidays : Day 2

Points : 30

Category : Web

Difficulty : Very Easy

🛎️ Concierge Briefing

He booked the quiet room. It's not on the floor plan, not in the brochure, not on any door. But port 8080 is wide open, and the rooms it never lists are the ones worth finding.

Welcome to the Byte Lotus, where the WiFi is open, the app is free, and the concierge already knows your coffee order. You spend these first days as a guest who simply notices things — a room that isn't on the floor plan, packets that leave every night at the same hour, a profile assembled from two breakfasts and a livestream.

The Byte Lotus guest-experience platform went live in a hurry, and the night-shift developer shipped more than the website.

🗝️ ROOM ACCESS

Lab Machine :

http://10.49.148.70:8080

🏖️ TODAY'S ITINERARY

Dump the exposed source code.

Find the flag.

WebDirectory Enumeration

Answer the questions below

Q1.) What is the flag?

Web Preview :

None 

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<title>Byte Lotus &mdash; Stay Noticed</title>
<style>
  :root { --ink:#e8e4d8; --bg:#0c0e0d; --accent:#c8a96a; --muted:#6f7370; }
  * { box-sizing:border-box; margin:0; padding:0; }
  body { background:var(--bg); color:var(--ink); font-family:Georgia,'Times New Roman',serif;
         min-height:100vh; display:flex; flex-direction:column; }
  .bar { display:flex; justify-content:space-between; align-items:center;
         padding:22px 40px; border-bottom:1px solid rgba(200,169,106,.18);
         letter-spacing:.32em; font-size:13px; text-transform:uppercase; color:var(--accent); }
  .bar nav a { margin-left:26px; color:var(--muted); text-decoration:none; }
  .bar nav a:hover { color:var(--accent); }
  main { flex:1; display:flex; flex-direction:column; justify-content:center;
         max-width:720px; margin:0 auto; padding:60px 32px; }
  .lotus { font-size:13px; letter-spacing:.5em; color:var(--accent); text-transform:uppercase; }
  h1 { font-size:54px; font-weight:normal; line-height:1.1; margin:18px 0 28px;
       font-family:'Didot','Bodoni MT',Georgia,serif; }
  p.lead { font-size:18px; line-height:1.8; color:#cfcabb; }
  .cta { margin-top:38px; }
  .cta a { display:inline-block; border:1px solid var(--accent); color:var(--accent);
           padding:13px 28px; text-decoration:none; letter-spacing:.18em; font-size:13px;
           text-transform:uppercase; transition:.2s; }
  .cta a:hover { background:var(--accent); color:var(--bg); }
  footer { padding:20px 40px; border-top:1px solid rgba(200,169,106,.12);
           color:var(--muted); font-size:12px; letter-spacing:.12em; display:flex; justify-content:space-between; }
</style>
</head>
<body>
  <div class="bar">
    <div>&#10048; BYTE&nbsp;LOTUS</div>
    <nav><a href="#">Rooms</a><a href="#">The App</a><a href="#">Concierge</a><a href="#">Stay</a></nav>
  </div>
  <main>
    <div class="lotus">&mdash; arrivals &mdash;</div>
    <h1>Byte&nbsp;Lotus</h1>
    <p class="lead">
      At BYTE LOTUS Hotel, we believe comfort begins before you arrive. Our
      intelligent guest experience platform helps us anticipate your needs,
      streamline your stay, and ensure every moment feels effortless.
    </p>
    <div class="cta"><a href="/booking">Reserve a stay</a></div>
  </main>
  <footer>
    <span>BYTE LOTUS HOSPITALITY GROUP</span>
    <span>guest experience platform &middot; build staging</span>
  </footer>
</body>
</html>

Directory Search with dirsearch :

None 
  _|. _ _  _  _  _ _|_    v0.4.3
 (_||| _) (/_(_|| (_| )

Extensions: php, aspx, jsp, html, js | HTTP method: GET | Threads: 25 | Wordlist size: 11460

Output File: /mnt/z/reports/http_10.49.148.70_8080/__26-07-31_14-14-14.txt

Target: http://10.49.148.70:8080/

[14:14:14] Starting:
[14:14:33] 200 -  124B  - /.git/branches/
[14:14:33] 200 -   92B  - /.git/config
[14:14:33] 200 -   73B  - /.git/description
[14:14:33] 200 -  437B  - /.git/
[14:14:34] 200 -  165B  - /.git/logs/
[14:14:34] 200 -  897B  - /.git/hooks/
[14:14:34] 200 -  153B  - /.git/logs/refs
[14:14:34] 200 -  289B  - /.git/index
[14:14:34] 200 -  240B  - /.git/info/exclude
[14:14:35] 200 -  283B  - /.git/objects/
[14:14:35] 200 -  145B  - /.git/info/
[14:14:35] 200 -  169B  - /.git/refs/
[14:14:35] 200 -  161B  - /.git/logs/refs/heads
[14:14:36] 200 -  437B  - /.git
[14:14:36] 200 -  126B  - /.git/refs/tags
[14:14:36] 200 -  189B  - /.git/logs/HEAD
[14:14:36] 200 -   34B  - /.git/COMMIT_EDITMSG
[14:14:36] 200 -   21B  - /.git/HEAD
[14:14:36] 200 -  151B  - /.git/refs/heads
[#####               ] 27%   3113/11460        22/s       job:1/1  errors:1

Go to : http://10.49.148.70:8080/.git

None 
wget -r -np -R "index.html*" http://10.49.148.70:8080/.git/
git checkout -- .
10.49.148.70:8080$ ls
README.md  app.js  index.html
10.49.148.70:8080$ cat README.md
# Byte Lotus — Guest Experience Platform

Internal staging repository for the guest app and concierge personalization
service. Do not deploy this folder to production.

Staging flag (remove before launch): THM{byt3_l0tus_n3v3r_f0rg3ts}

Answer : THM{byt3_l0tus_n3v3r_f0rg3ts}

None None

I hope you enjoyed reading this post as much as I enjoyed writing it. Thanks for reading my blog sir ;) Lawvye