Welcome to the web application of U.A., the Superhero Academy.

https://tryhackme.com/room/yueiua

Join us in the mission to protect the digital world of superheroes! U.A., the most renowned Superhero Academy, is looking for a superhero to test the security of our new site.

Our site is a reflection of our school values, designed by our engineers with incredible Quirks. We have gone to great lengths to create a secure platform that reflects the exceptional education of the U.A.

Please allow the machine 3 - 5 minutes to fully boot.

This write up will have my problem-solving-thoughts and mistakes → All flags are redacted

Briefing Takeaways

• “new site” → This will be a web application.
• Hint: “Enumerate thoroughly, there might be hidden functionality. Once you found a way in, be suspicious of any unused files.” → Hidden functions and unused files.

My allocated target machine: 10.10.87.228 → this will change for you

Setting up: