/ tags/ HTB

# Access

Hack-The-Box 6 / 72
3 min read

Windows Easy machine - Access.

HTB Windows Nmap A network scanner used to enumerate open ports, services, and versions on a target. NTLM Windows' legacy authentication protocol — vulnerable to relay and pass-the-hash attacks. GPO Group Policy Object — a Windows domain-wide configuration mechanism, abusable for code execution across all machines. FTP File Transfer Protocol — frequently misconfigured with anonymous access, exposing sensitive files. Telnet An unencrypted remote login protocol — credentials and traffic are sent in cleartext.
Read

# Analytics

Hack-The-Box 4 / 72
2 min read

Linux Easy machine - Analytics.

HTB RCE Remote Code Execution — the ability to run arbitrary commands on a target system remotely. Linux Sudo Linux command for running as another user — misconfigured sudo rules are a common privilege escalation path. SSH Secure Shell — encrypted remote login, targeted via key theft, brute force, or misconfigured access. Nmap A network scanner used to enumerate open ports, services, and versions on a target. CVE A publicly catalogued, known vulnerability with a unique identifier (Common Vulnerabilities and Exposures). Docker A containerization platform — misconfigured sockets or escapes can lead to host compromise. DNS The Domain Name System — translates hostnames to IPs; often leaks subdomains and internal naming during recon.
Read

# Broker

Hack-The-Box 3 / 72
3 min read

Linux Easy machine - Broker.

HTB RCE Remote Code Execution — the ability to run arbitrary commands on a target system remotely. Linux Sudo Linux command for running as another user — misconfigured sudo rules are a common privilege escalation path. SSH Secure Shell — encrypted remote login, targeted via key theft, brute force, or misconfigured access. Nmap A network scanner used to enumerate open ports, services, and versions on a target. CVE A publicly catalogued, known vulnerability with a unique identifier (Common Vulnerabilities and Exposures).
Read