Stocker — HackTheBox Machine Simple Writeup | 2023

HackTheBox’s New Machine — Stocker | Walkthrough | Karthikeyan Nagaraj

Make sure to Connect with the Release Arena VPN, Don’t Connect with Normal HackTheBox VPN

Analysis:

1. Let’s Start with a Nmap Scan

2. As usual 2 ports are open sshandhttp. So Now let’s Enumerate the http service

3. Before we analyse the http service, Make sure to add the domainstocker.htb to your/etc/hosts as this is the domain we need to Enumerate.

4. Let’s Explore the host stocker.htb to further Analyse for anything Interesting

5. Now Let’s Enumerate subdomains using gobuster

gobuster vhost -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-5000.txt…