Optimum is a beginner-level machine which mainly focuses on enumeration of services with known exploits. Both exploits are easy to obtain and have associated Metasploit modules, making this machine fairly simple to complete.

🕵️ Enumeration

After spawning the machine and connecting to the VPN, we start with the initial enumeration.

🔍 Initial Nmap Scan

We begin by running an initial nmap scan with the following command:

nmap -sC -sV -vv -oA nmap/initial_scan <Target-IP>

• -sC Default script scan
• -sV Service version detection
• -vv Verbose output
• -oA Output all formats

Nmap reports only Port 80 open:

Getting Started is not really a box on HTB Labs, it is just a knowledge check in the Getting Started module of the Penetration Tester Job Role Path, but I am writing a Writeup about it anyway.

🕵️ Enumeration

After spawning the machine and connecting to the VPN, we start with the initial enumeration.

🔍 Initial Nmap Scan

We begin by running an initial nmap scan with the following command:

nibbles is a fairly simple machine, however with the inclusion of a login blacklist, it is a fair bit more challenging to find valid credentials. luckily, a username can be enumerated and guessing the correct password does not take long for most. This is my first box and also my first writeup.

🕵️ Enumeration

After spawning the machine and connecting to the VPN, we start with the initial enumeration.