Hackthebox Conceal

Mon, 07 Mar 2022 00:00:00 +0000

Hackthebox Conceal Walkthrough Link to heading

Initial Enumeration Link to heading

Port Scan Link to heading

$ sudo nmap -sT -p- -min-rate 10000 -Pn -oN alltcp.txt 10.10.10.116
sudo nmap -sU -p- -min-rate 10000 -Pn -oN alludp.txt 10.10.10.116
[sudo] password for rocky: 
Host discovery disabled (-Pn). All addresses will be marked 'up' and scan times will be slower.
Starting Nmap 7.91 ( https://nmap.org ) at 2022-02-27 19:46 EST
Nmap scan report for 10.10.10.116
Host is up.
All 65535 scanned ports on 10.10.10.116 are filtered

Nmap done: 1 IP address (1 host up) scanned in 130.18 seconds
Host discovery disabled (-Pn). All addresses will be marked 'up' and scan times will be slower.
Starting Nmap 7.91 ( https://nmap.org ) at 2022-02-27 19:48 EST
Nmap scan report for 10.10.10.116
Host is up (0.16s latency).
Not shown: 65534 open|filtered ports
PORT STATE SERVICE
500/udp open isakmp

Nmap done: 1 IP address (1 host up) scanned in 14.25 seconds

I have decided to run the Autorecon script as well to confirm i have not missed anything. It took longer time(more than 40min). I could see and additinal udp port 161 as well.Full results are uploaded [here](Rchitect/_top_100_udp_nmap.txt at Yoda · tcprks/Rchitect · GitHub). There 2 services to enumerate( SNMP and ISAKMP)

Port 161,162 SNMP enumeration

Sun, 27 Feb 2022 00:00:00 +0000

SNMP enumeration of port udp ports 161-162 Link to heading

Initial Scan

sudo nmap -sU --open -p 161 10.10.10.116 -oG out.txt\$ cat out.txt 
# Nmap 7.91 scan initiated Sun Mar 6 18:06:39 2022 as: nmap -sU --open -p 161 -oG out.txt 10.10.10.116
Host: 10.10.10.116 () Status: Up
Host: 10.10.10.116 () Ports: 161/open|filtered/udp//snmp///
# Nmap done at Sun Mar 6 18:06:40 2022 -- 1 IP address (1 host up) scanned in 1.04 seconds