Member-only story
THM - Advent of Cyber ’24 Side Quest #1
A writeup for the room Advent of Cyber ’24 Side Quest on TryHackMe
Explore a series of advanced challenges alongside the core Advent of Cyber event!
This article covers the first challenge, looking at how to get the ticket and the task that comes with it.
How to find the first ticket
The first ticket can be found inside the Day 1 challenge.
By adding to your hosts file the domain of the C2 server, you will be redirected to the port 8000 on the same IP of the web server for converting YouTube videos.
On this port, we can see only a login page. Testing standard credentials is not working and even using Hydra with common credentials doesn’t return any results.
Looking to the GitHub profile for the Day 1 challenge we can see a Flask server code for the C2 server, probably the same running on the port 8000.
