Hack The Box is an online platform that allows you to test and advance your skills in penetration testing and cybersecurity. With constantly refreshed labs, categorized into different levels of difficulty, you can try your hand at various, real-world scenarios, covering a multitude of technologies. The platform encourages you to learn in a gamified, yet challenging environment. Whether you're a seasoned pro looking to hone your skills or a beginner venturing into the field, Hack The Box is a fantastic learning tool.

MEOW - (Telnet, Protocols, Reconnaissance, Weak Credentials, Missconfiguration)

What does the acronym VM stand for?

  1. VM - virtual machine

OpenVPN - To start, you need to install the OpenVPN client and logged in terminal and use it to connect to the Hack The Box internal network. Run the following command: sudo openvpn {filename}.ovpn

Nmap - For a quick port scan, we can use a tool called Nmap. It's a powerful tool that allows us to discover hosts and services on a computer network by sending packets and analyzing the responses.

Telnet - Telnet is an older service used for remote management of other hosts on a network. Despite its age, it is still used in some places, although it should be noted that it is not secure, as it sends data in plain text. You can use it with the command: telnet {hostname} {port}.(with username/password)

What tool do we use to interact with the operating system in order to issue commands via the command line, such as the one to start our VPN connection? It's also known as a console or shell.

  1. Terminal

What service do we use to form our VPN connection into HTB labs?

  1. openvpn

What tool do we use to test our connection to the target with an ICMP echo request?

  1. Ping

What is the name of the most common tool for finding open ports on a target?

  1. nmap

What service do we identify on port 23/tcp during our scans?

command :

└─$ nmap -p- --min-rate 5000 10.129.1.17

Output :

PORT   STATE SERVICE
23/tcp open  telnet
  1. telnet

What username is able to log into the target over telnet with a blank password?

7)root

Submit Flag

Some typical important accounts have self-explanatory names, such as:

- root@Meow:~# ls
- flag.txt  snap
- cat flag.txt
  1. flag inside the flag.txt