{"id":165,"date":"2026-02-01T16:55:56","date_gmt":"2026-02-01T16:55:56","guid":{"rendered":"https:\/\/patatties.nl\/?p=165"},"modified":"2026-02-01T16:55:56","modified_gmt":"2026-02-01T16:55:56","slug":"htb-beep","status":"publish","type":"post","link":"https:\/\/patatties.nl\/?p=165","title":{"rendered":"HTB: Beep"},"content":{"rendered":"\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"300\" height=\"300\" src=\"https:\/\/patatties.nl\/wp-content\/uploads\/2026\/02\/image-10.png\" alt=\"\" class=\"wp-image-167\" srcset=\"https:\/\/patatties.nl\/wp-content\/uploads\/2026\/02\/image-10.png 300w, https:\/\/patatties.nl\/wp-content\/uploads\/2026\/02\/image-10-150x150.png 150w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"61\" src=\"https:\/\/patatties.nl\/wp-content\/uploads\/2026\/02\/image-9-1024x61.png\" alt=\"\" class=\"wp-image-166\" srcset=\"https:\/\/patatties.nl\/wp-content\/uploads\/2026\/02\/image-9-1024x61.png 1024w, https:\/\/patatties.nl\/wp-content\/uploads\/2026\/02\/image-9-300x18.png 300w, https:\/\/patatties.nl\/wp-content\/uploads\/2026\/02\/image-9-768x45.png 768w, https:\/\/patatties.nl\/wp-content\/uploads\/2026\/02\/image-9.png 1401w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Next up, Beep! The ping is running, the nmap is scanning! Lets have a look at this golden oldy!<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Right off the bat, the sV and sC flag makes the scan time out or something. So just a simple nmap scan is what we fall back to.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>\u250c\u2500\u2500(root\u327fkali)-&#91;\/home\/kali\/htb\/knife]\n\u2514\u2500# nmap -p- 10.129.229.183      \nStarting Nmap 7.98 ( https:\/\/nmap.org ) at 2026-02-01 11:42 -0500\nNmap scan report for 10.129.229.183\nHost is up (0.0070s latency).\nNot shown: 65519 closed tcp ports (reset)\nPORT      STATE SERVICE\n22\/tcp    open  ssh\n25\/tcp    open  smtp\n80\/tcp    open  http\n110\/tcp   open  pop3\n111\/tcp   open  rpcbind\n143\/tcp   open  imap\n443\/tcp   open  https\n856\/tcp   open  unknown\n993\/tcp   open  imaps\n995\/tcp   open  pop3s\n3306\/tcp  open  mysql\n4190\/tcp  open  sieve\n4445\/tcp  open  upnotifyp\n4559\/tcp  open  hylafax\n5038\/tcp  open  unknown\n10000\/tcp open  snet-sensor-mgmt<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">A lot of ports! Going to port 80, it redirects to HTTPS, that seems to not support TLS1.2 or higher. Thats kinda interesting, i mean, its an older box. Perhaps i should try and see if i can get firefox to accept lower TLS versions. Changing the setting in <strong>about:config<\/strong> called <strong>security.tls.version.min<\/strong> to 1.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We now see the web-page:<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"903\" height=\"541\" src=\"https:\/\/patatties.nl\/wp-content\/uploads\/2026\/02\/image-11.png\" alt=\"\" class=\"wp-image-168\" srcset=\"https:\/\/patatties.nl\/wp-content\/uploads\/2026\/02\/image-11.png 903w, https:\/\/patatties.nl\/wp-content\/uploads\/2026\/02\/image-11-300x180.png 300w, https:\/\/patatties.nl\/wp-content\/uploads\/2026\/02\/image-11-768x460.png 768w\" sizes=\"auto, (max-width: 903px) 100vw, 903px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Lets see if elastix has known vulnerabilities. There&#8217;s a couple on exploit-db. Lets try out a couple.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Next up, Beep! The ping is running, the nmap is scanning! Lets have a look at this golden oldy! Right off the bat, the sV and sC flag makes the scan time out or something. So just a simple nmap scan is what we fall back to. A lot of ports! Going to port 80, [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[],"class_list":["post-165","post","type-post","status-publish","format-standard","hentry","category-htb"],"_links":{"self":[{"href":"https:\/\/patatties.nl\/index.php?rest_route=\/wp\/v2\/posts\/165","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/patatties.nl\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/patatties.nl\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/patatties.nl\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/patatties.nl\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=165"}],"version-history":[{"count":1,"href":"https:\/\/patatties.nl\/index.php?rest_route=\/wp\/v2\/posts\/165\/revisions"}],"predecessor-version":[{"id":169,"href":"https:\/\/patatties.nl\/index.php?rest_route=\/wp\/v2\/posts\/165\/revisions\/169"}],"wp:attachment":[{"href":"https:\/\/patatties.nl\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=165"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/patatties.nl\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=165"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/patatties.nl\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=165"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}