This box is an “Easy” Windows box by HackTheBox
User flag #
usual first scans : #
mkdir scans loot shares
nmap -A 10.129.11.69 -vvv -oA scans/first_scan
nmap -A 10.129.11.69 -vvv -p- -oA scans/full_scan
nmap -sU -A 10.129.11.69 --top-port 100 -vvv -oA scans/first_scan_udp
80/tcp open http syn-ack ttl 127 nginx
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_http-title: Did not follow redirect to http://monitorsfour.htb/
5985/tcp open http syn-ack ttl 127 Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
|_http-title: Not Found
|_http-server-header: Microsoft-HTTPAPI/2.0
Looks like a regular Windows box with some web and a winRM port, let’s edit the /etc/hosts file and go check out the web :