---
title: "Discussion on \"TryHackMe : Bugged - Writeup\" | Hashnode"
description: "Discussion on \"TryHackMe : Bugged - Writeup\". Solve TryHackMe Bugged by enumerating MQTT, decoding a hidden backdoor, abusing CMD execution, and retrieving the flag without a reverse shell"
url: "https://hashnode.com/posts/tryhackme-bugged-writeup/6a83d642e7083cfc6b60dcde"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [TryHackMe : Bugged - Writeup](https://exploitnotes.hashnode.dev/tryhackme-bugged-writeup?utm_source=hashnode&utm_medium=feed)

Solve TryHackMe Bugged by enumerating MQTT, decoding a hidden backdoor, abusing CMD execution, and retrieving the flag without a reverse shell

Aug 18 · 5 min read · exploitnotes.hashnode.dev  
Read the article

-   [#tryhackme](https://hashnode.com/tag/tryhackme)
-   [#bugged](https://hashnode.com/tag/bugged)
-   [#mqtt](https://hashnode.com/tag/mqtt)
-   [#mosquitto](https://hashnode.com/tag/mosquitto)
-   [#mqtt-enumeration](https://hashnode.com/tag/mqtt-enumeration)
-   [#mqtt-security](https://hashnode.com/tag/mqtt-security)
-   [#iot-security](https://hashnode.com/tag/iot-security)
-   [#backdoor](https://hashnode.com/tag/backdoor)
-   [#command-execution](https://hashnode.com/tag/command-execution)
-   [#base64](https://hashnode.com/tag/base64)
-   [#linux](https://hashnode.com/tag/linux)
-   [#network-security](https://hashnode.com/tag/network-security)
-   [#web-security](https://hashnode.com/tag/web-security)
-   [#cybersecurity](https://hashnode.com/tag/cybersecurity)
-   [#ctf](https://hashnode.com/tag/ctf)
-   [#capture-the-flag](https://hashnode.com/tag/capture-the-flag)
-   [#penetration-testing](https://hashnode.com/tag/penetration-testing)
-   [#ethical-hacking](https://hashnode.com/tag/ethical-hacking)
-   [#red-team](https://hashnode.com/tag/red-team)
-   [#vulnerability-assessment](https://hashnode.com/tag/vulnerability-assessment)

## Written by

[Yogeshwar Peela](https://hashnode.com/@exploitnotes)

@exploitnotes · Vishakapatnam, India

  
[View profile](https://hashnode.com/@exploitnotes)

I write detailed writeups on HackTheBox, PicoCTF and other CTF challenges. Passionate about web exploitation, Active Directory attacks and ethical hacking

## Responses

Markdown supported · ⌘↵ to post

No responses yet.
