Stocker — Hack The Box

Stocker — Hack The Box

In this writeup, we will solve a box on hackthebox called Stocker.

Nmap Scan

nmap -sC -sV -Ao nmap/stocker 10.10.11.196

From the Nmap scan, we get the HTTP URL for the web page.

echo "10.10.11.196 stocker.htb" >> /etc/hosts

Web enumeration

There is nothing much on the home page.

Subdomain enumeration

gobuster vhost -u http://stocker.htb/ -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-5000.txt

Add the subdomain in the /etc/hosts file

if we intercept the login request.

This web page is vulnerable …

box hack hacking hack the box hackthebox-walkthrough hackthebox-writeup information security node.js