Day 3 - Christmas Chaos

Date: 03, December, 2020

Author: Dhilip Sanjay S

Learning Objectives

Authentication vs Authorization
Impact of Default credentials
Dictionary attacks using Hydra and Burpsuite
- Cluster bomb attack type in Burpsuite

What is the flag?

Answer: THM{885ffab980e049847516f9d8fe99ad1a}
Steps to reproduce:
- After performing cluster bombing, we get the username and password.
- Once you login with the following credentials, you can find the flag.
- Username: admin
- Password: 12345