RootMe CTF | TryHackMe | Nmap, Gobuster & Reverse Shell Guide

Join me as I navigate the 'RootMe' room on TryHackMe, showcasing hands-on techniques with tools like Nmap and Gobuster. Discover how to craft an effective reverse shell, exploit SUID bits, and hunt down those elusive flags. Whether you're a beginner or a seasoned pro, this guide offers insights and tips to enhance your cybersecurity skills. Don't forget to like, share, and subscribe for more walkthroughs! #ctf #tryhackme #cybersecurity #pentesting #privilegeescalation

[@jirho1781]

keep em coming!

[@p0k3r1st]

when I tried to upload the file "WARNING: Failed to daemonise. This is quite common and not fatal. Connection refused (111) " writing. i tried php1, php2, php3 ,php4, php5, phtml and other exts. what i can do?

[@Eiii-1762]

I think it's because .php1 is not a valid file format.

[@user-ti4tx7jc5c]

How is it panel, as much as this is great kindly explain some terminology or how they become, i love what you are doing, please if you can explain how you knew it was panel @4:20 i will really appreciate

[@05INT]

During enumeration, the only directory that allows uploads is the panel directory. The other directories did not allow any uploads. I think that is what the creator of this room meant by secret directory.

[@user-ti4tx7jc5c]

Okay thank you
@@05INT

[@NanamiRizz]

hi can you explain why did you add the 2>/dev/null ? what are the purpose and function of that kind script ? i tried the given script in the hint but it gave so many directory and it says access denied

[@NanamiRizz]

also can you explain the script that you are running

[@05INT]

I'm assuming you're talking about 8:58? If you are, all that 2>/dev/null really does is at the end of a command, it means "take any error messages this command might produce and discard them." In practical terms, it's used to keep your terminal tidy and free from error messages or warnings that you might not be interested in seeing.