THM - Billing

A writeup for the room Billing on TryHackMe

Some mistakes can be costly.

Billing

Footprinting

We can start by doing a scan with nmap

nmap -sS -p- MACHINE_IP

There are four open ports: 22, 80, 3306, and 5038.

We can obtain more details by running a complete scan on them.

nmap -A -p 22,80,3306,5038 MACHINE_IP

The server is running the web application Magnus Billing along with MariaDB and Asterisk.

GitHub - magnussolution/magnusbilling7: MagnusBilling is a fast, secure, efficient, high…

When we try to go to the web site with a browser, the only thing we see is a login page.