HTB — Preignition

Let’s Get Started!

Using the -sV option tells Nmap to check open ports to determine the version of the service running on them.

nmap -p 80 <ip>

gobuster dir -u <URL> -w <wordlist>

The result is as follows:

The -x option tells Gobuster to append the specified file extension(s) (like .php) to each word in the wordlist, helping to discover PHP files.

gobuster dir -u <URL> -w <wordlist> -x php

To find out the root of this machine, the first thing we will do is visit the web app from the IP address that has been provided.

We can see that this website displays the default nginx page. Next, we will try to visit the /admin.php .

We found a login page that appears to still use default credentials such as admin:admin.

log in and find the flag to solve this machine