HackTheBox WriteUps By — jsinix

Group policy embedded password | kerberoasting

Default credentials

HTTP Upload File Restriction | UnPatched OS

Careless sudo permissions

PHP unrestricted web shell

pfsense | default credentials | exposed unattended files

ShellShock | Sudo

Virtual Hosting | DNS Recon | File Upload Sanitization

RaspberryPi | Default Credentials | Sudo

EternalBlue | ms17–010

Wordpress | PhpMyAdmin | Hardcoded Credentials | Credential Reuse

Microsoft IIS WebDAV Write Access Code Execution

Webdav ScStoragePathFromUrl Overflow

ColdFusion 8 Directory Traversal | MS10–059

Rejetto HFS | RCE | Local Privilege Escalation (MS16–032)

LFI | Information Disclosure | RCE

Nmap tells us there is FTP and HTTP Server on this box.

Looking at the name sounds like we might be working with a very old box. Doing a quick nmap scan verifies it.