http://blog.bgz.app/tags/hackthebox/Recent content in Hackthebox on Bagaz!Hugoen-usSun, 13 Aug 2023 14:14:26 +0700http://blog.bgz.app/posts/hackthebox-busqueda/Sun, 13 Aug 2023 14:14:26 +0700http://blog.bgz.app/posts/hackthebox-busqueda/Busqueda is a machine running Linux with an easy difficulty level. I will write this walkthrough briefly as I find the machine not very interesting. Foothold First, perform a port enumeration using nmap. The scan reveals a domain on port 80. $ nmap -sV -sC -oN busqueda.nmap 10.10.11.208 Nmap scan results for 10.10.11.208: Host is up (0.074s latency). Not shown: 998 closed tcp ports (conn-refused) PORT STATE SERVICE VERSION 22/tcp open ssh OpenSSH 8.http://blog.bgz.app/posts/hackthebox-agile/Sun, 06 Aug 2023 14:04:19 +0700http://blog.bgz.app/posts/hackthebox-agile/Agile is a machine running on a Linux OS with a medium difficulty level. There was an unintended way to solve this machine, but it has since been patched, so we will cover the intended steps. Foothold The first step in a pentest is usually scanning the machine. Here, I used nmap for port scanning. $ nmap -sV -sC -oN agile.nmap 10.10.11.203 Nmap scan report for 10.10.11.203 Host is up (0.http://blog.bgz.app/posts/hackthebox-routerspace/Sun, 10 Jul 2022 22:18:17 +0700http://blog.bgz.app/posts/hackthebox-routerspace/RouterSpace is a Linux machine classified as easy difficulty. This machine has retired and been replaced by RedPanda. Machine IP: 10.10.11.148 As always, I started by scanning the services and ports using Nmap. Nmap scan report for 10.10.11.148 Host is up (0.15s latency). Not shown: 998 filtered ports PORT STATE SERVICE VERSION 22/tcp open ssh (protocol 2.0) | fingerprint-strings: | NULL: |_ SSH-2.0-RouterSpace Packet Filtering V1 80/tcp open http | fingerprint-strings: | FourOhFourRequest: | HTTP/1.http://blog.bgz.app/posts/hackthebox-undetected/Mon, 04 Jul 2022 21:54:21 +0700http://blog.bgz.app/posts/hackthebox-undetected/Undetected is a medium-difficulty Linux machine. However, it was quite challenging in terms of privilege escalation due to the need to analyze a binary. Machine IP: 10.10.11.146 First, perform a service scan using Nmap, which reveals two open services: SSH and HTTP. Nmap scan report for 10.10.11.146 Host is up (0.20s latency). Not shown: 998 closed ports PORT STATE SERVICE VERSION 22/tcp open ssh OpenSSH 8.2 (protocol 2.0) 80/tcp open http Apache httpd 2.http://blog.bgz.app/posts/hackthebox-phoenix/Mon, 27 Jun 2022 21:30:05 +0700http://blog.bgz.app/posts/hackthebox-phoenix/Phoenix is a machine with the Linux OS and a difficulty level classified as hard. This machine was retired a few days ago. However, due to being busy with end-of-semester assignments and upcoming exams, I only recently managed to write about it. Machine IP: 10.10.11.149 As always, I performed a port scan to identify the services running on the machine using Nmap. Nmap scan report for 10.10.11.149 Host is up (0.http://blog.bgz.app/posts/hackthebox-paper/Mon, 20 Jun 2022 21:10:32 +0700http://blog.bgz.app/posts/hackthebox-paper/Paper is a machine with the Linux OS and is classified as easy. This machine has been retired and replaced by a new machine called Trick. Machine IP: 10.10.11.143 As usual, I performed a service and port scan using Nmap and got the following result: Nmap scan report for paper.htb (10.10.11.143) Host is up (0.11s latency). Not shown: 997 closed ports PORT STATE SERVICE VERSION 22/tcp open ssh OpenSSH 8.0 (protocol 2.http://blog.bgz.app/posts/hackthebox-meta/Mon, 13 Jun 2022 19:56:30 +0700http://blog.bgz.app/posts/hackthebox-meta/Meta is a machine running Linux with a medium difficulty level. Since this machine has been retired, I have created a writeup for it. Machine IP: 10.10.11.140 The first thing I did was scan the machine using nmap to discover open ports and services. Nmap scan report for 10.10.11.140 Host is up (0.11s latency). Not shown: 998 closed ports PORT STATE SERVICE VERSION 22/tcp open ssh OpenSSH 7.9p1 Debian 10+deb10u2 (protocol 2.