Platform: TryHackMe · Difficulty: Hard · Type: network lab (GNS3 containers) — BGP route hijacking

Target: 10.112.133.199 (jumpbox telnet 6001) — authorized lab only

Objective (scope.md): After hijacking the route, DNS1 starts receiving queries from the victim.

What is the internal domain name the victim is trying to resolve?

Answer: VEhNe0JHUF9pc19teV9taWRkbGVfbmFtZX0K.flag.sekureapp.thm

(the leftmost label base64-decodes to THM{BGP_is_my_middle_name} )

0. Tooling used in this walkthrough

The jumpbox is a bare GNS3 container: no sshpass , no paramiko / pexpect , no nc , no

tcpdump , no pip , and no internet . Every helper below is therefore a small stdlib-only Python

script kept in tools/ next to this writeup. None of them are needed to follow the methodology —

they only bridge the missing plumbing.

Script Runs on Purpose

tools/tn.py your host Telnet client for the jumpbox on port 6001.…