Exploitation with cURL - Hoperation Eggsploit Tryhackme Walkthrough

Learning Objectives

• Understand what HTTP requests and responses are at a high level.

• Use cURL to make basic requests (using GET) and view raw responses in the terminal.

• Send POST requests with cURL to submit data to endpoints.

• Work with cookies and sessions in cURL to maintain login state across requests.

Answer the questions below

Make a POST request to the /post.php endpoint with the username admin and the password admin. What is the flag you receive?

THM{curl_post_success}

Make a request to the /cookie.php endpoint with the username admin and the password admin and save the cookie. Reuse that saved cookie at the same endpoint. What is the flag your receive? THM{session_cookie_master}

After doing the brute force on the /bruteforce.php endpoint, what is the password of the admin user? secretpass

Make a request to the /agent.php endpoint with the user-agent TBFC. What is the flag your receive? THM{user_agent_filter_bypassed}

Hack smarter, not harder. Subscribe now and get exclusive cybersecurity write-ups, CTF walkthroughs, and real-world exploitation techniques before everyone else.