HackTheBox Starting Point Tier 0 machine: Dancing Walkthrough

Setup

  1. Using Pwnbox
  2. Using OpenVPN

Introduction

Scanning and enumeration

sudo apt-get install smbclient
  • ADMIN$ = These are hidden network shares. These allow system administrators to have remote access to every disk volume on a network-connected system. These shares cannot be permanently deleted but may be disabled.
  • C$ = The operating system is hosted here.
  • IPC$ = Used for inter-process communication via named pipes and is not part of the file system.
  • WorkShares = This is a custom share

Foothold

smbclient \\\\{target_ip}\\{share_name}

Task answers

Server Message Block
445
microsoft-ds
-L
4
WorkShares
get
5f61c10dffbc77a704d76016a22f1664

--

--

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store