Legacyq

#

Overview

#

• OS: Windows
• IP: 10.10.10.4
• Difficulty: Easy
• Platform: HackTheBox
• OSCP: No
• Lists: N/A

Summary

#

smb vulnerability.

Enumeration

#

I started broad, validated each finding, and then focused only on paths that were reproducible.

nmap scan results

Checking for existing smb vulnerabilities

Vulnerabilities

#

I validated this step using the evidence below before moving forward in the chain.

PORT 445/tcp

Exploitation

#

Once the primitive was confirmed, I converted it into a stable foothold and chained it forward.

gained access to the shell, now lets look for the flags

root flag

user flag

Pwned