THM - Cheese CTF

A writeup for the room Cheese CTF on TryHackMe

Inspired by the great cheese talk of THM!

Cheese CTF

Footprinting

We can start by doing a scan with nmap.

nmap -sS MACHINE_IP

Many ports seems open, but by better filtering the result we can be sure about the port 22 and 80.

On port 80 we can see only a static page.

User flag

Looking for hidden directories

If we look at the source of the home page, we see a comment and a link to a login form.