mKingdom - TryHackMe (THM)

Tyler Ramsbey's video on the Hack-Tools browser extension: • A Browser Extension Fo...

[@TheOdy55ey]

Here are some additional notes I think are important: 1. When running pspy, observe the timestamps. After each minute that passes, you will see the 'curl' command being run as indicated by the output of pspy. It will keep popping up in the output of pspy every minute. This is how we know that the 'curl' command is running every minute. 2. If you are having trouble with reading the root.txt file with the 'cat' command, use either the 'strings' command or 'less' command. The commands "strings root.txt" and "less root.txt" worked for me. Alternatively, you can copy the root.txt file to the '/tmp' directory and then do "cat root.txt" on the root.txt file which you copied to the '/tmp' directory. 3. At 27:47, observe that 'UID=0', which indicates the process is running as root. 4. mKingdom is rated as 'Easy' and not 'Medium', although in my view the 'Medium' rating is more appropriate.