Write-up of the Blocky machine from HTB

Today I’ll take a look at Blocky, where we will explore the easy-rated machine inspired by Minecraft.

Short Summary

• Nmap enumeration for open ports
• Directory busting for additional information
• Reversing a java.Class
• Password reuse, and multiple initial access paths
• Simple privilege escalation via sudo -l

Enumeration

We run a port scan with the following command:

sudo nmap -p- -T4 --min-rate 2500 10.10.10.37

and find the following ports open:

PORT      STATE  SERVICE   REASON
21/tcp    open   ftp       syn-ack ttl 63
22/tcp …

credential stuffing enumeration hackthebox htb machine privilege escalation reversing write-up