OWASP Top 10 2021 : Web Fundamentals : TryHackMe : Part 2

OWASP Top 10 2021 : Web Fundamentals : TryHackMe : Part 2

https://tryhackme.com/r/room/owasptop...

OWASP Top 10 - 2021
Learn about and exploit each of the OWASP Top 10 vulnerabilities; the 10 most critical web security risks.

Have a look around the web app. The developer has left themselves a note indicating that there is sensitive data in a specific directory.

What is the name of the mentioned directory?

Navigate to the directory you found in question one. What file stands out as being likely to contain sensitive data?

Use the supporting material to access the sensitive data. What is the password hash of the admin user?

What is the admin's plaintext password?

Log in as the admin. What is the flag?

What strange text file is in the website's root directory?
How many non-root/non-service/non-daemon users are there?

What user is this app running as?

What is the user's shell set as?

What version of Alpine Linux is running?

#owasp #owasptop10 #tryhackme