Non-members are welcome to access the full story here.

This is my write-up for the TryHackMe room on . Written in 2026, I hope this write-up helps others learn and practice cybersecurity.

Task 1: Help Us

The CEO and co-founder of futurevera.thm says their space research website is being threatened by blackhat hackers demanding ransom, claiming they can take over the site. They are asking for help to identify what the attackers could compromise.

The target website is:

https://futurevera.thm

There is a hint to add this entry to /etc/hosts:

IP_MACHINE futurevera.thm

The task is to investigate the website and determine what can be taken over, then find the flag value.

Okay, I'm using RustScan here, so let's run it:

IP_MACHINE futurevera.thm
None

We found 3 open ports:

PORT    STATE SERVICE REASON
22/tcp  open  ssh     syn-ack
80/tcp  open  http    syn-ack
443/tcp open  https   syn-ack

However, when we open the website, we get:

None

We need to edit the hosts file to add the IP:

sudo nano /etc/hosts

Then we add:

10.49.162.160 *.futurevera.thm 10.49.162.160 futurevera.thm

None

The website can be opened, but there is a security warning:

None

Let's run Gobuster:

gobuster dir -vv -o gob -u https://10.49.162.160 -w /usr/share/wordlists/dirb/common.txt -k
None

Nothing was found, so we'll try subdomain enumeration. Here, I'm installing SecLists:

snap install seclists
None

Using the information from that directory, let's run the wordlist:

gobuster vhost -vv -k --append-domain -u https://futurevera.thm -w /snap/seclists/current/Discovery/Web-Content/common.txt -o sub_gob2
None

We search for the "Found" results:

grep Found sub_gob2
None

The text seems to hint that this website is for support, so let's try the support subdomain first. We edit the hosts file again:

None

Let's try opening it again:

None

Then we check the certificate to see if there are any insights:

None

We got a new hint, so let's add it to the hosts file again:

None

Okay, let's try using curl:

None

And we got the flag!

Thanks for reading. See you in the next lab.

Originally published at https://farrosfr.com on March 2, 2026.