HTB: Expressway – Write‑up

Info

• Target: 10.10.11.87
• Difficulty: Easy
• OS: Linux

Initial Recon

Ran my initial Nmap scan

nmap -sC -sV -oN nmap --min-rate 10000 expressway.htb

This, unfortunately, revealed nothing besides the ssh service running on port 21.

My next step was to try scan all of the host ports - perhaps there was port obfuscation going on:

nmap -sC -sV -oN nmap_all_ports --min-rate 10000 expressway.htb

This yieleded no additional services.

At this point, deduction leads to the services being likely run over the UDP protocol. I ran a UDP Nmap scan:

nmap -sU --min-rate 10000 expressway.htb

Oh no! This machine is still ACTIVE!

To adhere with Hack the Box’s community guidelines, the remainder of this post will be locked until the machine is retired.

Happy Hacking :-)