Administrator - HTB

Sun, 04 May 2025 00:00:00 +0000

Details

URL	Hack The Box :: Administrator
Difficulty	Medium
User Solves	U: 7241 ~ R: 7025
Release Date	09 Nov, 2024

Overview

This machine simulates a realistic internal Windows Active Directory environment. The initial access is granted with the following credentials:

Username: olivia
Password: ichliebedich

Reconnaissance

Rustscan + Nmap

A Rustscan quick sweep followed by Nmap revealed the following open ports:

PORT      STATE SERVICE      VERSION
21/tcp    open  ftp          Microsoft ftpd
53/tcp    open  domain       Simple DNS Plus
88/tcp    open  kerberos-sec Microsoft Windows Kerberos
135/tcp   open  msrpc        Microsoft Windows RPC
139/tcp   open  netbios-ssn  Microsoft Windows netbios-ssn
464/tcp   open  kpasswd5?
5985/tcp  open  http         Microsoft HTTPAPI httpd 2.0 (WinRM)
47001/tcp open  http         Microsoft HTTPAPI httpd 2.0
49666/tcp open  msrpc        
49854/tcp open  ncacn_http   Microsoft RPC over HTTP
49859/tcp open  msrpc
49914/tcp open  msrpc
62532/tcp open  msrpc

Key services: FTP (21), Kerberos (88), and WinRM (5985)

BloodHound on

Administrator - HTB

Overview

Reconnaissance

Rustscan + Nmap