HackTheBox - CozyHosting

CozyHosting is one of the Easy Machines from HackTheBox, where in CTF CozyHosting we will learn about PSQL.

Introduction

• Connect CozyHosting using Pwnbox or OpenVPN.
• Spawn machine.

Enumeration

To check the target connection and port, we can use Ping and Nmap.

Ping

After spawn machine, we can start with ping Target IP.

Nmap

cuy

– masih kosong –

• pertama nmap
• buka ip url brw(browser), gabisa? tambahkan di etc/hosts
• stlh itu buka brw lagi, bisa kan?
• nah, coba fuzzing pakai feroxbuster/gobuster/dirsearch
• stlh fuzzing, nnti hasilnya ada …/actuactor/sessions
• bentar nnti lanjut lagi…