{"id":103,"date":"2024-01-24T00:17:21","date_gmt":"2024-01-24T00:17:21","guid":{"rendered":"https:\/\/blog.ishsome.com\/?p=103"},"modified":"2024-04-16T20:55:33","modified_gmt":"2024-04-17T01:55:33","slug":"tryhackme-umbrella","status":"publish","type":"post","link":"https:\/\/blog.ishsome.com\/index.php\/2024\/01\/24\/tryhackme-umbrella\/","title":{"rendered":"TryHackMe: Umbrella"},"content":{"rendered":"
\n
\"\"<\/figure>\n<\/div>\n\n\n

Umbrella <\/a>from TryHackMe is a Linux machine with multiple misconfigurations. To get a foothold, we need to perform enumeration on the Docker Registry and obtain credentials for the MySQL database. By accessing the DB, we can get usernames and passwords for multiple users to log in to a webpage and connect to SSH. To get root access we will abuse a mounted directory in a Docker container which is also accessible by a low-privileged user.<\/p>\n\n\n\n

NMAP<\/mark><\/h2>\n\n\n\n

We will begin with NMAP to find the open ports on the machine. Our NMAP scan shows the following ports are open:<\/p>\n\n\n\n