“Shared” WriteUp | HackTheBox

Port Enumeration

First run nmap 10.10.11.172 -Pn -n to find all the open ports. It gave us 3 ports back 22,80,443. Now run advanced nmap scan against them for more information.

nmap 10.10.11.172 -Pn -n -p 22,80,443 -sC -sV

Port 80 : Web

Nmap tells there’s an Nginx sever running on the port. If we try to navigate it gives us the following error with a domain name.

Add the domain name to /etc/hosts file and then use the domain …

ctf cybersecurity hackthebox sqli writeup