Hack The Box Secret Walkthrough

A walkthrough of the Secret box on Hack the Box

Secret card source: https://app.hackthebox.com/machines/Secret

Enumeration

The enumeration phase starts with an nmap scan of the system.

nmap scan results

We can see there is two webservers hosted on ports 80 and 3000. SSH is also on port 22. This may be helpful later

Let’s start with checking out the website. The figure below shows the landing page:

landing page on port 80

Checking the documentation on the website we can …

box hack hacking hack the box htb penetration testing secret walkthrough