Back to all writeups
extracted

Exploitation with cURL Hoperation Eggsploit

~15 min read

Room Name: Exploitation with cURL - Hoperation Eggsploit Room Link: https://tryhackme.com/room/webhackingusingcurl-aoc2025-w8q1a4s7d0

Make a POST request to the /post.php endpoint with the username admin and the password admin. What is the flag you receive? THM{curl_post_success} Make a request to the /cookie.php endpoint with the username admin and the password admin and save the cookie. Reuse that saved cookie at the same endpoint. What is the flag your receive? THM{session_cookie_master} After doing the brute force on the /bruteforce.php endpoint, what is the password of the admin user? secretpass Make a request to the /agent.php endpoint with the user-agent TBFC. What is the flag your receive? THM{user_agent_filter_bypassed}