This is writeup of Brooklyn nine nine room in tryhackme.com Summary: Easy Room just required standard enum. The entry point is by bruteforcing through hydra and then using gtfo. Walkthrough: nmap -sC -sV <ip> We can see anonymous ftp login and a note. So we can see jake is username and we need to bruteforce for the password. ok. Now enum http port So here we have a clue. Nope maybe a rabbit hole. Let's do bruteforce in ssh port with hydra Alright got ssh pass Here we go simple gtfo and rooted Another rabbit hole. If you dirbust with jpg extension will result this pic This pic containes hidden data which turns out to be troll.