Difficulty: Easy - Linux Scan nmap ┌──(nhannha㉿conmeo)-[~/htbMachine/season-11/Connected] └─$ sudo nmap 10.129.245.100 -A -T4 [sudo] password for nhannha: Starting Nmap 7.95 ( https://nmap.org ) ...
Difficulty: Easy - Linux Start machine and scanning for opening port, identify that an web is opening at port 3000 ┌──(nhannha㉿conmeo)-[~] └─$ sudo nmap 10.129.12.198 -A -T4 [sudo] password for...
Difficulty: Easy - Linux Starting nmap scan ┌──(nhannha㉿conmeo)-[~] └─$ sudo nmap 10.129.239.191 -A -T4 [sudo] password for nhannha: Starting Nmap 7.95 ( https://nmap.org ) at 2026-08-10 09:18 ...
Difficulty: Easy - Linux Start scanning 1000 prominent ports with default setting. ┌──(nhannha㉿conmeo)-[~] └─$ sudo nmap 10.129.21.196 -A -T4 [sudo] password for nhannha: Starting Nmap 7.95 ( h...
Difficulty: Easy - Linux Start machine and scanning for opening ports ┌──(nhannha㉿conmeo)-[~/htbMachine/season-11/Cohort] └─$ sudo nmap 10.129.19.132 -A -T4 [sudo] password for nhannha: Startin...
SECTION 14: Local File Disclosure Question 1 Try to read the content of the ‘connection.php’ file, and submit the value of the ‘api_key’ as the answer. UTM1NjM0MmRzJ2dmcTIzND0wMXJnZXdmc2RmCg Acce...
SECTION 1: Bug Bounty Programs Tổng Quan Bug Bounty Program (BBP) / Vulnerability Rewards Program (VRP): chương trình kiểm thử bảo mật liên tục, bổ sung cho code audit và pentest nội bộ. Khá...
Attacking Common Applications - Skills Assessment I During a penetration test against the company Inlanefreight, you have performed extensive enumeration and found the network to be quite locked d...
SECTION 21: Attacking Thick Client Applications Tổng Quan Thick client app: cài locally, không cần internet, xử lý tại client (khác thin client chạy trên server qua browser). Thường viết bằn...
SECTION 11: Jenkins - Discovery & Enumeration Tổng Quan Jenkins: automation server viết bằng Java, chạy trong servlet container (như Tomcat); dùng cho continuous integration. Trước đây t...