Imagery – HTB Write-up


Owned Imagery from hack the box !

I was able to own imagery from HackTheBox.


Nmap Result

Nmap scan report for 10.10.11.88
Host is up, received echo-reply ttl 63 (0.95s latency).
Scanned at 2025-09-29 08:41:56 EDT for 690s
Not shown: 989 closed tcp ports (reset)
PORT      STATE    SERVICE         REASON                              VERSION
22/tcp    open     ssh             syn-ack ttl 63                      OpenSSH 9.7p1 Ubuntu 7ubuntu4.3 (Ubuntu Linux; protocol 2.0)
1501/tcp  filtered sas-3           host-unreach from 10.10.14.1 ttl 64
3168/tcp  filtered poweronnud      host-unreach from 10.10.14.1 ttl 64
3333/tcp  filtered dec-notes       no-response
5001/tcp  filtered commplex-link   no-response
5033/tcp  filtered jtnetd-server   host-unreach from 10.10.14.1 ttl 64
5051/tcp  filtered ida-agent       no-response
8000/tcp  open     tcpwrapped      syn-ack ttl 63
8080/tcp  filtered http-proxy      no-response
9100/tcp  filtered jetdirect       no-response
44443/tcp filtered coldfusion-auth host-unreach from 10.10.14.1 ttl 64
Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel

Read data files from: /usr/share/nmap
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 691.10 seconds
Raw packets sent: 1548 (68.088KB) | Rcvd: 16516 (1.442MB)

“Imagery” is still active on HackTheBox. Once retired, this article will be published for public access as per HackTheBox’s policy on publishing content from their platform.

Response

  1. R3dthefirst Avatar

    Hello, how is it going? I am currently working on this machine and have got a backup.aes file, the next logical step I could think of is to decrypt this file. I have been brute-forcing (rockyou.txt) the password but I haven’t gotten a hit yet, does the am I supposed to look for the password in the machine or am I doing the right thing by brute-forcing.

Leave a Reply

Your email address will not be published. Required fields are marked *