htb

This is an easy-difficulty mobile challenge - and here is the description: This app has stored my credentials and I can only login automatically.

As always we start with a port scan: ╰─ nmap -sC -sV 10.129.230.179 Starting Nmap 7.

In this challenge we are greeted with a web page: Let’s go ahead and make an account and very quickly we can observe that we are able to make and post threads with markdown content.

We run a port scan and see that something is running on port 80:

As always, we can begin with a port scan: ╰─ nmap -sC -sV 10.

We can start with a port scan: ╰─ nmap -sC -sV 10.129.55.122 Starting Nmap 7.

We can start with a port scan as we always do: ╰─ nmap -sC -sV 10.

As always, we begin with a port scan: ╰─ nmap -sC -sV 10.129.11.88 Starting Nmap 7.

As always, we will start off with a port scan: ╰─ nmap -sC -sV 10.

To read this post, enter the root user’s password hash ("$6…k1"). We start off with a port scan: