TryHackMe: Room 404 Walkthrough (Hacker’s Holiday Challenge)

Step 1: Reconnaissance

I pasted the given target ip to my browser and this page poped up.

Reading the challenge it was obvious it has something to do with the source code and maybe downloading it.

So i started with directory fuzzing using simple dirb command :

dirb http://yourtryhackmeip:8080

dirb http://yourtryhackmeip:8080

Which returned a file path named " /.git/HEAD "

After some research i understood what it meant, the whole websites source code repository was publicly available.

Now the next step was downloading the whole repo for which i used the tool git-dumper.

pipx install git-dumper

pipx install git-dumper

Then i downloaded the whole source code :

git-dumper http://yourtryhackmeip:8080/.git ./dumped_repo

git-dumper http://yourtryhackmeip:8080/.git ./dumped_repo

Then after going through the source file there was a README.md :

cat README.md

cat README.md

There you go.