Nocturnal (Easy)| HackTheBox Writeup (Walkthrough)

This write-up details a step-by-step walkthrough of hacking into an Easy-level machine called "Nocturnal" from HackTheBox. Here's a summary of the key points:

1. The attacker started by scanning open ports using Nmap, identifying port 80 as open.

2. They accessed the web server on port 80 and found an SQLite database file named "nocturnal.db".

3. Using SQL injection techniques, they extracted usernames and hashed passwords from this database.

4. They cracked one of the password hashes using CrackStation.net to get a valid login for user "tobias".

5. By gaining SSH access as tobias, they discovered an internal web server running on port 8080 that could be accessed via SSH port forwarding.

6. The attacker then found an ISPConfig control panel running and exploited a known vulnerability (CVE-2023-46818) to gain root privileges.

7. This allowed them to access the root flag at /root/root.txt, completing the machine's challenges.

The main techniques used were:

• Port scanning
• SQL injection
• Password cracking
• SSH port forwarding
• Exploiting web application vulnerabilities

Some key takeaways

Read the full article at InfoSec Write-ups - Medium

---

Want to create content about this topic? Use Nemati AI tools to generate articles, social posts, and more.