-
💻 Mirai – Writeup
Lire plus: 💻 Mirai – WriteupDefault credentials we’ll be used on this machine to access it. Add the IP address in /etc/hosts: … 10.10.10.48 mirai.htb … First run a nmap scan: A lot of ports are open contrary to the other easy boxes. Let’s start with the website: It tells us that the machine is a Pi-hole version 3.1.4. We…
-
💻 Knife – Writeup
Lire plus: 💻 Knife – WriteupA backdoor is found on the web server of this machine. Add the IP address in /etc/hosts: … 10.10.10.242 knife.htb … First run a nmap scan: The website doesn’t give us anything useful: In the source code there is no link. Looking at Wappalyzer we get some versions: Apache 2.4.41 PHP 8.1.0 There is no…
-
💻 Jerry – Writeup
Lire plus: 💻 Jerry – WriteupWe’ll exploit a Tomcat functionnality to become Administrator of this Windows machine. Add the IP address in /etc/hosts: … 10.10.10.95 jerry.htb … First run a nmap scan: There is only one port open: We can search on Google for an exploit related to this version: There’s an ExploitDB exploit for this version. Let’s see if…
-
💻 Granny – Writeup
Lire plus: 💻 Granny – WriteupThis Windows machine looks a lot like another machine… Add the IP address in /etc/hosts: … 10.10.10.15 granny.htb … First run a nmap scan: We can run a directory fuzzing but nothing interesting is found: Here is the only page accessible on the website: This is a webdav server and there is a tool to…
-
💻 Grandpa – Writeup
Lire plus: 💻 Grandpa – WriteupIn this machine we’ll exploit a kernel vulnerability to become Administrator. Add the IP address in /etc/hosts: … 10.10.10.14 grandpa.htb … First run a nmap scan: There is only one port open which is an HTTP service on port 80. It is detected as being a Windows machine running Microsoft IIS httpd 6.0. We can…
-
💻 Explore – Writeup
Lire plus: 💻 Explore – WriteupDuring this easy Android machine, we’ll exploit a known CVE. Add the IP address in /etc/hosts: … 10.10.10.247 explore.htb … First run a nmap scan: I cut a part of the output because the rest was garbage. The SSH banner, gives us a good hint to find the Android product: Banana Studio. A quick search…
-
💻 Devel – Writeup
Lire plus: 💻 Devel – WriteupIn this easy Windows machine, we’ll exploit a misconfiguration to become Administrator. Add the IP address in /etc/hosts: … 10.10.10.5 devel.htb … First run a nmap scan: Default web page: There is a FTP server running on port 21. We can connect to it as anonymous user. There is nothing interesting on it but we…
-
💻 Cap – Writeup
Lire plus: 💻 Cap – WriteupThe name of the easy Linux box gives us useful hints… Add the hostname into /etc/hosts: … 10.10.10.245 cap.htb … First run a nmap scan to detect open ports: The nmap scan output is way too long so we’ll just focus on the important parts. The FTP server is not accessible using anonymous login and…
Tag: htb
Articles récents
Tags
boat challenge cody credentials crypto ctf cve easy embed exif exploit geoint geolocation google google lense gralhix hacking hacktoria htb iis intelligence kernel linux location manipulation maps metadata metasploit metaverse mondayquiz osint php redirection reverse search social engineering social media socmint sofia santos street view thursdayquiz web web3 wifi windows writeup