IP: 10.10.11.166

trick.htb

Hashes

Users

via smtp enum:

  • mysql
  • root

Passwords

Creds

========================================================

NMAP

22/tcp open ssh OpenSSH 7.9p1 Debian 10+deb10u2 (protocol 2.0) 25/tcp open smtp Postfix smtpd |smtp-commands: debian.localdomain, PIPELINING, SIZE 10240000, VRFY, ETRN, STARTTLS, ENHANCEDSTATUSCODES, 8BITMIME, DSN, SMTPUTF8, CHUNKING 53/tcp open domain ISC BIND 9.11.5-P4-5.1+deb10u7 (Debian Linux) | dns-nsid: | bind.version: 9.11.5-P4-5.1+deb10u7-Debian 80/tcp open http nginx 1.14.2 |_http-title: Coming Soon - Start Bootstrap Theme |_http-server-header: nginx/1.14.2

Directory Brute Force

-Nothing_found

FileBrute Force

-Nothing_found

Other

No_subdomains_found

========================================================

Foothdold

PrivEsc