Intro

Hello ethical hackers! Today we are going to pass the Coriddor on TryHackMe. This lab has tags: IDOR, Web.

Recon

Scanning

For no need to enter IP again and again. I exported IP like a variable in current bash shell.

export IP=*.*.*.*

Then i scan the host with rustscan.

Find only web. Ok.

Web

Check source code:

We find a lot of links to strange location. But... may be it's hash?

Hash

Yeah, it's MD5

I will use crackstation for decrypt MD5.

Okey, we decrypt all hashes. It's number from 1 to 13. Ussualy array start from 0. We will also try to start from 0.

Encode 0 with MD5

Exploit IDOR

Insert new md5 hash to IP and found the right door!