TryHackMe | Battery | Walkthrough

This TryHackMe Battery lab walkthrough shows Linux reconnaissance with Nmap and Gobuster, plus Burp Suite testing to uncover hidden web paths.

The attacker finds admin.php and a report endpoint, then uses SQL truncation to bypass controls and access the user-level flag.

An XXE injection in the report flow exposes deeper system data, leading to privilege escalation and the root flag.

The case shows how chained web flaws can turn routine enumeration into full server compromise, underscoring secure input handling and least privilege.