Hack the Box(HTB) Machines Walkthrough Series — Tenten

Continuing with our series on Hack The Box (HTB) machines, this article contains the walkthrough of an HTB machine named Tenten.

HTB is an excellent platform that hosts machines belonging to multiple OSes. It also has some other challenges as well. Individuals have to solve the puzzle (simple enumeration plus pentest) in order to log into the platform and download the VPN pack to connect to the machines hosted on the HTB platform.

Note: Writeups of only retired HTB machines are allowed. The machine in this article, named Tenten, is retired.

The Walkthrough

Let’s start with this machine. [CLICK IMAGES TO ENLARGE]

1. Download the VPN pack for the individual user and use the guidelines to log into the HTB VPN.

Sponsorships Available

Sponsorships Available

Sponsorships Available

2. The Tenten machine IP is 10.10.10.10.

3. We will adopt the same methodology of performing penetration testing as we’ve used before. Let’s start with enumeration in order to gain as much information about the machine as possible.

4. As we can see, there are two ports present on the machine: port 80 and port 22.
<<nmap -sC -sV -oA tenten 10.10.10.10>>

5. Let’s browse to port 80. As we can see below, the site is powered by WordPress. Looking into the source code does not reveal anything interesting.

6. Let’s use wpscan to find more information about the site.
<<wpscan -u http://10.10.10.10 –enumerate p –enumerate u –enumerate t>>

a.  We can see the WordPress theme in action

b. There are also some vulnerabilities discovered in the installed version of Job Manager.

c. The tool was able to find the user name.

7. Let’s take a look at the vulnerability in Job Manager. More details can be found here. Let’s see if we can use this vulnerability to disclose (Read more...)