Cap VM – Hack The Box

https://app.hackthebox.com/machines/Cap This is a very easy box. With Hack The Box, it takes a long time to run nmap. I started nmap and loaded up the IP in my web browser to see if there was a website. Enumeration Initial Web Enumeration Visiting http://10.10.10.245/, the title page mentioned /ip. However, instead of running wfuzz immediately, … Read more

Investigating an Android Backup – Hack The Box Write-Up

Challenge Overview This challenge provided a downloadable file named cat.ab, which was identified as an Android Backup file. The goal was to analyze the backup and extract hidden information, ultimately leading to the discovery of the flag. Step 1: Identifying the File Type After downloading the file, I used the strings command to inspect its … Read more

Investigating Windows

Link to TryHackMe Investigating Windows Question 1: What is the version and year of the Windows machine? Opening up the command prompt and running this command winver Showed me it was running Windows Server 2016 Answer: Windows Server 2016 Question 2: What user logged in last? I checked Event Viewer>Windows Logs>Security Then set a custom … Read more

MadnesS

For this box, you really should think “Outside the box.” With all boxes, I start with an NMAP scan. This is what NMAP came back with. Just a reminder, this is an all port scan “-p-” If you want to run a top port scan, you can remove the “-p-“. The scan revealed an SSH … Read more