I decided to try another TryHackMe capture the flag room. This time it was Mustacchio. This room involved one of the OWASP Top 10 vulnerabilities called A4:2017-XML External Entities (XXE). This vulnerability,
This room was a very interesting one which involved a couple of techniques I hadn't used before. It also required using some tools I've used a lot before but for different purposes.
I finally completed my first ever hard TryHackMe room called Internal. It had a lot of unique methods of exploit including some I hadn't encountered before. It involved using a lot of tools
Despite being marked with a difficulty level of easy, this CTF involved quite a few different techniques. There was local file inclusion, log file poisoning, horizontal and vertical privilege escalation.
This room was good fun and involved a few different techniques in order to complete. There was a lot of enumeration and an interesting new technique I learned in order to escalate privileges.