RCE
-
Read more: Usage – Hack The Box – @lautarovculic
User.txt Will discover open ports with nmap sudo nmap -sS -sV –min-rate 5000 -n -Pn -T4 -vv 10.10.11.18 Output PORT STATE SERVICE REASON VERSION 22/tcp open ssh syn-ack ttl 63 OpenSSH 8.9p1 Ubuntu 3ubuntu0.6 (Ubuntu Linux; protocol 2.0) 80/tcp open http syn-ack ttl 63 nginx 1.18.0 (Ubuntu) Inspectin the webserver in the port 80, we…
-
Read more: IClean – Hack The Box – @lautarovculic
User.txt First, we will discover which ports are open. sudo nmap -sS –min-rate 5000 -n -Pn -T4 -vv -sV 10.10.11.12 Output: PORT STATE SERVICE REASON VERSION 22/tcp open ssh syn-ack ttl 63 OpenSSH 8.9p1 Ubuntu 3ubuntu0.6 (Ubuntu Linux; protocol 2.0) 80/tcp open http syn-ack ttl 63 Apache httpd 2.4.52 ((Ubuntu)) If we go to clean.htb…
-
Read more: Codify – Hack The Box – @lautarovculic
User.txt Add the machine IP to /etc/hosts file Now it’s nmap time sudo nmap -sS –min-rate 5000 -n -Pn -T4 -vv 10.10.11.239 PORT STATE SERVICE REASON VERSION 22/tcp open ssh syn-ack ttl 63 OpenSSH 8.9p1 Ubuntu 3ubuntu0.4 (Ubuntu Linux; protocol 2.0) 80/tcp open http syn-ack ttl 63 Apache httpd 2.4.52 3000/tcp open http syn-ack ttl…
-
Read more: Visual – Hack The Box – @lautarovculic
User.txt We note that the only open port is 80:HTTP After configuring as usual the /etc/hosts file, let’s take a look at the content of the web page, underneath, we find a functionality; which as it indicates, we can send a repository. But first, take a close look at the following message: Basically, a Git…
-
Read more: Hack The Box – Sau – @lautarovculic
User.txt First we will configure the file /etc/hosts with the IP and sau.htb Then we will do a scan with nmap to obtain information about the ports and services available on the machine. Well, port 80 keeps thinking. So apparently the entry point is port 55555. Let’s take a look. We have Request-Basket version 1.2.1,…
-
Read more: Hack The Box – Pilgrimage – @lautarovculic
This writeup are available in my GitHub.