Capture The Flag competition solutions and walkthroughs
HackTheBox
Begin by adding the target machine IP to /etc/hosts. nano /etc/hosts sudo nmap -sV -sC valentine.htb I also conducted an NSE script scan against the vulnerable target. sudo nmap -sV --script=vuln valentine.htb --max-rate=10000 Meanwhile, directory fuzzing also proved useful. dirsearch -u http://valentine.htb
CTF Writeups
Reconnaissance Add the IP address of the machine to /etc/hosts: nano /etc/hosts Port Scanning Conduct port scan: sudo nmap -sV -sC cicada.htb, sudo nmap -sV -p- --max-rate 10000 cicada.htb Observe that I was dealing with AD structure: Domain Controller Hostname: commonName=CICADA-DC.cicada.htb Domain: cicada.
CTF Writeups
Map IP address to hosts file: nmap -sV -sC -p- --min-rate 5000 -T4 Unusual ports can be seen below: I never had DNS know-how, so I'll search for it. Technically it is not possible to attempt Zone Transfer, yet since I was in a CTF let me give
CTF Writeups
Add machine ip to /etc/hosts Check whether target is alive or not. ping vortex.htb Begin with fast port scan: nmap -p- --min-rate 5000 -T4 vortex.htb No results obtained: Forgot -Pn flag. Added it: nmap -p- --min-rate 5000 -T4 -Pn vortex.htb It took a lot time to
CTF Writeups
Begin with attaching IP address to domain: nano /etc/hosts Firstly, check 80,443,8080 ports + conduct automated reconnaissance Looks like Wordpress frontend. On meta part and footer it is observable Let’s conduct port scan & fuzzing respectively. use both at the same time -> sudo nmap -sV
CTF Writeups
Add given ip to host file keeper.htb nano /etc/hosts Conduct nmap scan -> fast-forward full scope nmap -sV -sC -T4 -p- 10.129.229.41 22/tcp open ssh OpenSSH 8.9p1 Ubuntu 3ubuntu0.3 80/tcp open http nginx 1.18.0 (Ubuntu) Only ports below