hackthebox - The Random Adventure That Is Life (RATIL)

The Random Adventure That Is Life (RATIL)

Sign in Subscribe

hackthebox

A collection of 17 posts

Hack The Box: Sau

Hack The Box: Sau

Enumeration Port 80 doesn't give me anything but port 55555 reveals what looks like a Python-based web app. The application appears to be some sort of app to inspect HTTP requests that are sent to the application. There is a function to enter a master token that allows the user

Hack The Box: Keeper

Hack The Box: Keeper

Enumeration As always, start off with an NMAP Scan Just 80 and 22 open today. We will start by enumerating the web app. To make some of this work easier, I am going to add keeper.htb and tickets.keeper.htb to my hosts file. Navigating to the linked site

Hack the Box: Inject

Hack the Box: Inject

Enumeration Browsing to the webpage on port 8080 lands at a "Zodd Cloud" product page. There seems to be signup and sign in functionality that will be worth exploring. None of the links work except signup, which lands at an Under Construction page. Oh, but there is an Upload link

Hack the Box: Busqueda

Hack the Box: Busqueda

Initial Recon Conduct typical initial portscan └─$ nmap 10.10.11.208 Starting Nmap 7.93 ( https://nmap.org ) at 2023-04-26 11:13 EDT Nmap scan report for 10.10.11.208 Host is up (0.089s latency). Not shown: 998 closed tcp ports (conn-refused) PORT STATE SERVICE 22/tcp open

Hack The Box: Precious

Hack The Box: Precious

Initial Enumeration A simple NMAP scan to just get the lay of the land initially. Only two ports appear to be open. SSH appears to allow for password auth, and the web port hosts a page that allegedly converts pages to PDFs. Brute forcing additional pages on the web server

Hack The Box: Previse

Hack The Box: Previse

NMAP shows that ports 80 and 22 are open. The site at port 80 is a login page to a File Storage site. Running GoBuster against the site reveals several additional pages that although they redirect back to the main login page, do indeed have content as well. Specifically: * accounts.

Return To Hack The Box - BountyHunter

Return To Hack The Box - BountyHunter

After a several year hiatus from Hack The Box, I decided to jump back in and take a look. Here is the write-up for Bounty Hunter BountyHunter Initial nmap scan indicates ports 22 and 80 are open. Browsing the page on port 80, there is a "Portal" section that indicates

Hack The Box: Irked

Hack The Box: Irked

Irked: Retired If you are interested in learning more about penetration testing, Hack the Box is a great way to get your feet wet in a legal and well built environment. Head over to hackthebox.eu [https://hackthebox.eu] to get started. Enumeration My initial enumeration returned a handful of

Hack The Box: Jerry

Hack The Box: Jerry

Jerry: Retired 17 November 2018 If you are interested in learning more about penetration testing, Hack the Box is a great way to get your feet wet in a legal and well built environment. Head over to hackthebox.eu [https://hackthebox.eu] to get started. This box was almost too

Hack The Box: DevOops

Hack The Box: DevOops

DevOops: Retired 13 October 2018 If you are interested in learning more about penetration testing, Hack the Box is a great way to get your feet wet in a legal and well built environment. Head over to hackthebox.eu [https://hackthebox.eu] to get started. Been a while since I

Hack The Box - Bashed

Hack The Box - Bashed

Bashed: Retired 28 April 2018 If you are interested in learning more about penetration testing, Hack the Box is a great way to get your feet wet in a legal and well built environment. Head over to hackthebox.eu [https://hackthebox.eu] to get started. Bashed was one of the

Hack The Box - Sense

Hack The Box - Sense

Sense: Retired 24 March 2018 If you are interested in learning more about penetration testing, Hack the Box is a great way to get your feet wet in a legal and well built environment. Head over to hackthebox.eu [https://hackthebox.eu] to get started. Sense was an easier box

Hack The Box - Mirai

Hack The Box - Mirai

Mirai: Retired 10 Feb 2018 If you are interested in learning more about penetration testing, Hack the Box is a great way to get your feet wet in a legal and well built environment. Head over to hackthebox.eu [https://hackthebox.eu] to get started. Mirai was certainly one of

Hack The Box - Solidstate

Hack The Box - Solidstate

SolidState: Retired 27 Jan 2018 If you are interested in learning more about penetration testing, Hack the Box is a great way to get your feet wet in a legal and well built environment. Head over to hackthebox.eu [https://hackthebox.eu] to get started. Solidstate was extremely similar to

Hack The Box - Blocky

Hack The Box - Blocky

Blocky: Retired 9 Dec 2017 If you are interested in learning more about penetration testing, Hack the Box is a great way to get your feet wet in a legal and well built environment. Head over to hackthebox.eu [https://hackthebox.eu] to get started. Blocky has been the easiest

Hack The Box: Europa

Hack The Box: Europa

Europa: Retired 2 Dec 2017 If you are interested in learning more about penetration testing, Hack the Box is a great way to get your feet wet in a legal and well built environment. Head over to hackthebox.eu to get started Enumeration Using Sparta, I ran a staged NMAP

Hack The Box: Apocalyst

Hack The Box: Apocalyst

Apocalyst: Retired 25 Nov 2017 If you are interested in learning more about penetration testing, Hack the Box is a great way to get your feet wet in a legal and well built environment. Head over to hackthebox.eu to get started. Enumeration Using Sparta, I ran a staged NMAP