Posts

Showing posts from October, 2021

Hack The Box: Machines - dynstr (Medium)

Image
  Hello folks! Introduction Today I'm going to show you how the dynstr  machine can be solved. Looking at the picture of the released machine we can see that we will be dealing with the Linux instance. Obviously, the only thing we know about this device is its IP address and operating system. Therefore, we need to scan it for gathering more information. Enumeration As always I will start the enumeration part using nmap.  I want to launch the scan with common scripts and service enumeration as well as all information written to the stdout. Here is the command: And this is the result: As you can see port 80 is open among others. Therefore the target machine is HTTP server. More precisely the device is running the Apache 2.4.41 web server on Linux system, probably we are dealing with Ubuntu. The web application hosted by the target is a great path to own the machine. Let's look under the hood. The web application is the presentation of a DNS service. The only interesting thing tha