https://tryhackme.com/room/neighbour
💭 Thoughts after doing the room
I usually don’t like to say this, but compared to the other rooms I did in the easy category this one was a little bit too easy and short. I think the excellent IDOR written description suffices.
Task 1: Neighbour
Instructions say you have to visit the site in a webbrowser, so I skip nmap for now.
It shows a form and the instructions to press CTRL + U to view the source code.
In the source is the guest user pass so I’ll try that
It then shows this page
First thing I try is to change the URL to the the admin username.
Which … worked
