⏰ Clocky TryHackMe walk through ⏰
⏰Time is an illusion.⏰
https://tryhackme.com/r/room/clocky
⏰Script to generate the token:⏰
https://github.com/djalilayed/tryhack...
⏰By pass forbidden and filter for localhost⏰
https://book.hacktricks.xyz/pentestin...
http://0x7f000001/ = http://127.0.0.1
⏰Brute force mysql 8 user hash password⏰
https://www.percona.com/blog/brute-fo...
SELECT CONCAT('$mysql',LEFT(authentication_string,6),'*',INSERT(HEX(SUBSTR(authentication_string,8)),41,0,'*')) AS hash FROM mysql.user WHERE plugin = 'caching_sha2_password' AND authentication_string NOT LIKE '%INVALIDSALTANDPASSWORD%' AND authentication_string !='' AND User='dev';
hashcat -m 7401 -a 0 -D 2 -O -w 3 hash.txt rockyou.txt