HackTheBox
[Tier1] Tactics (nmap -Pn option)
2026.04.04
TaskWhich Nmap switch can we use to enumerate machines when our ping ICMP packets are blocked by the Windows firewall?-PnWhat does the 3-letter acronym SMB stand for?Server Message BlockWhat port does SMB use to operate at?445What command line argument do you give to smbclient to list available shares?-LWhat character at the end of a share name indicates it's an administrative share?$Write Upnma..
HackTheBox
[Tier1] Pennyworth (Jenkins)
2026.04.04
TaskWhat does the acronym CVE stand for?Common Vulnerabilities and ExposuresWhat do the three letters in CIA, referring to the CIA triad in cybersecurity, stand for?confidentiality, integrity, availabilityWhat is the version of the service running on port 8080?Jetty 9.4.39.v20210325What version of Jenkins is running on the target?2.289.1What type of script is accepted as input on the Jenkins Scr..
HackTheBox
[Tier1] Bike (SSTI)
2026.04.04
TaskWhat TCP ports does nmap identify as open? Answer with a list of ports seperated by commas with no spaces, from low to high.22,80What software is running the service listening on the http/web port identified in the first question?Node.jsWhat is the name of the Web Framework according to Wappalyzer?ExpressWhat is the name of the vulnerability we test for by submitting {{7*7}}?Server Side Temp..
HackTheBox
[Tier1] Funnel (tunneling, postgresql)
2026.04.04
TaskHow many TCP ports are open?2What is the name of the directory that is available on the FTP server?mail_backupWhat is the default account password that every new member on the "Funnel" team should change as soon as possible?funnel123#!#Which user has not changed their default password yet?christineWhich service is running on TCP port 5432 and listens only on localhost?postgresqlSince you can..
HackTheBox
[Tier1] Ignition (Most common passwords)
2026.04.04
TaskWhich service version is found to be running on port 80?nginx 1.14.2What is the 3-digit HTTP status code returned when you visit http://{machine IP}/?302What is the virtual host name the webpage expects to be accessed by?ignition.htbWhat is the full path to the file on a Linux computer that holds a local list of domain name to IP address pairs?/etc/hostsUse a tool to brute force directories ..