HTB Eighteen Writeup – Full Walkthrough

Pre-requisites

This box assumes the role of an assumed breach scenario and we are given the following credentials: kevin:iNa2we6haRj2gaw!

Enumeration

Run nmap scan

nmap -sC -sV -oN nmap 10.10.11.95

Findings

• Port 80 - Webserver. Didn’t follow redirect to http://eighteen.htb/ so need to add to /etc/hosts
• Port 1443 - MSSQL server 2022 16.00.1000.00
  • Domain name: EIGHTEEN
  • Domain Controller dc01.eighteen.htb
• Port 5985 - WinRM

Add the following to /etc/hosts

10.10.11.95   eighteen.htb DC01.eighteen.htb

⚠️

Oh No! This Machine is Still Active!

Eighteen is currently ACTIVE on Hack The Box. To adhere with Hack the Box’s community guidelines, the remainder of this post will be locked until the machine is retired.

For hints or discussion, join the community on the Hack The Box Discord.

Happy Hacking! 👾