Hack the Box - Nest - Walkthrough
Introduction Today we're going to be doing a pentest walkthrough of the Nest machine hosted at https://hackthebox.eu . For this pentest, we'll be using a Kali Linux virtual machine as our attacking system and the Nest machine as the victim system. After connecting to the Hack the Box network via VPN, we see that our target is located at 10.129.100.97 Scanning and Enumeration We'll start by scanning for open ports with Nmap : sudo nmap -T4 -p- 10.129.100.97 Now we'll do another Nmap scan, this time specifying the ports and picking up service names and version numbers: sudo nmap -sV -T4 -p445,4386 10.129.100.97 There seems to be an unusual service running on port 4386. Let's check it out using Netcat : netcat -C 10.129.100.97 4386 After some research, we can't find any info on this service, so we assume it's a custom network app. Specifically, accessing the service using Netcat requires the -C switch to work, since the app requires the Carriage Return t...