Try Hack Me- Anthem Walkthrough

📰 Medium · Cybersecurity

Learn to hack the Anthem machine on Try Hack Me by exploiting sensitive information disclosure and weak file permissions to gain admin privileges

intermediate Published 18 Apr 2026
Action Steps
  1. Perform a port scan on the Anthem machine to identify open ports and services
  2. Conduct web enumeration to gather information about the web application and its components
  3. Analyze the robots.txt file to discover hidden directories and files
  4. Infer credentials from exposed information and use them to gain RDP access
  5. Exploit weak file permissions to escalate privileges to the administrative level
Who Needs to Know This

This walkthrough is beneficial for cybersecurity teams and penetration testers who want to improve their skills in identifying and exploiting vulnerabilities in web applications and systems. It can help them understand the importance of securing sensitive information and configuring file permissions properly.

Key Insight

💡 Sensitive information disclosure through web artifacts and weak file permission controls can allow attackers to gain valid remote access and escalate privileges without exploiting complex vulnerabilities

Share This
🚨 Hack the Anthem machine on Try Hack Me by exploiting sensitive info disclosure and weak file permissions! 💻

Key Takeaways

Learn to hack the Anthem machine on Try Hack Me by exploiting sensitive information disclosure and weak file permissions to gain admin privileges

Full Article

Title: Try Hack Me- Anthem Walkthrough

URL Source: https://pulse-einher.medium.com/try-hack-me-anthemwalkthrough-7b619e254efe?source=rss------cybersecurity-5

Published Time: 2026-04-18T19:59:21Z

Markdown Content:
# Try Hack Me- Anthem Walkthrough. Hello, stranger — let’s begin. | by PulseEinher | Apr, 2026 | Medium

[Sitemap](https://pulse-einher.medium.com/sitemap/sitemap.xml)

[Open in app](https://play.google.com/store/apps/details?id=com.medium.reader&referrer=utm_source%3DmobileNavBar&source=post_page---top_nav_layout_nav-----------------------------------------)

Sign up

[Sign in](https://medium.com/m/signin?operation=login&redirect=https%3A%2F%2Fpulse-einher.medium.com%2Ftry-hack-me-anthemwalkthrough-7b619e254efe&source=post_page---top_nav_layout_nav-----------------------global_nav------------------)

[](https://medium.com/?source=post_page---top_nav_layout_nav-----------------------------------------)

Get app

[Write](https://medium.com/m/signin?operation=register&redirect=https%3A%2F%2Fmedium.com%2Fnew-story&source=---top_nav_layout_nav-----------------------new_post_topnav------------------)

[Search](https://medium.com/search?source=post_page---top_nav_layout_nav-----------------------------------------)

Sign up

[Sign in](https://medium.com/m/signin?operation=login&redirect=https%3A%2F%2Fpulse-einher.medium.com%2Ftry-hack-me-anthemwalkthrough-7b619e254efe&source=post_page---top_nav_layout_nav-----------------------global_nav------------------)

![Image 1](https://miro.medium.com/v2/resize:fill:64:64/1*dmbNkD5D-u45r44go_cf0g.png)

# Try Hack Me- Anthem Walkthrough

[![Image 2: PulseEinher](https://miro.medium.com/v2/resize:fill:64:64/1*czYs_Do-Bu21PIrIAuenIQ.png)](https://pulse-einher.medium.com/?source=post_page---byline--7b619e254efe---------------------------------------)

[PulseEinher](https://pulse-einher.medium.com/?source=post_page---byline--7b619e254efe---------------------------------------)

7 min read

·

Just now

[](https://medium.com/m/signin?actionUrl=https%3A%2F%2Fmedium.com%2F_%2Fvote%2Fp%2F7b619e254efe&operation=register&redirect=https%3A%2F%2Fpulse-einher.medium.com%2Ftry-hack-me-anthemwalkthrough-7b619e254efe&user=PulseEinher&userId=3638310b8c49&source=---header_actions--7b619e254efe---------------------clap_footer------------------)

--

[](https://medium.com/m/signin?actionUrl=https%3A%2F%2Fmedium.com%2F_%2Fbookmark%2Fp%2F7b619e254efe&operation=register&redirect=https%3A%2F%2Fpulse-einher.medium.com%2Ftry-hack-me-anthemwalkthrough-7b619e254efe&source=---header_actions--7b619e254efe---------------------bookmark_footer------------------)

[Listen](https://medium.com/m/signin?actionUrl=https%3A%2F%2Fmedium.com%2Fplans%3Fdimension%3Dpost_audio_button%26postId%3D7b619e254efe&operation=register&redirect=https%3A%2F%2Fpulse-einher.medium.com%2Ftry-hack-me-anthemwalkthrough-7b619e254efe&source=---header_actions--7b619e254efe---------------------post_audio_button------------------)

Share

**Hello, stranger — let’s begin.**

![Image 3](https://pulse-einher.medium.com/try-hack-me-anthemwalkthrough-7b619e254efe?source=rss------cybersecurity-5)

Ready to go??

Today’s problem is: [https://tryhackme.com/room/anthem](https://tryhackme.com/room/anthem)

**Challenge Overview:

Machine:**Anthem (THM)

**Path:**Port Scan → Web Enumeration → robots.txt Exposure → Credential Inference → RDP Access → File Permission Abuse → Admin Privilege Escalation

**Key Takeaway:**Sensitive information disclosure through web artifacts (robots.txt, page source) combined with weak file permission controls allowed credential discovery and direct privilege escalation without requiring exploitation of complex vulnerabilities.

**Business Impact:** In a real-world corporate web environment, exposure of internal credentials and misconfigured file permissions could allow attackers to gain valid remote access (e.g., via RDP) and escalate privileges to the administrative level — resulting in unauthorized system control, access to
Read full article → ← Back to Reads