Enigma HTB
Enigma is a Linux machine with a wide attack surface: a website, NFS and a full mail stack. Documents and mailboxes lead into a self-hosted business application, and internal credentials and a locally running service lead to root. Enigma (enigma.htb) is a Linux machine with a broad set of exposed services: SSH, a website, NFS (rpcbind on 111 and NFS on 2049), and a complete mail stack with POP3, IMAP and their TLS variants. Every one of them is worth checking, because the box is designed so that what you learn from one service unlocks the next. Expect to read what organisations leave lying around, such as onboarding material and internal email, and to reuse what you find with care. The middle of the box is a self-hosted business management application; the end is about local services and how much their configuration is trusted. Skills practiced: NFS share enumeration and mounting, webmail and mail-protocol reconnaissance, credential reuse, authenticated web application exploitation, MySQL database enumeration, password cracking, and Linux privilege escalation through internal services. The full step-by-step walkthrough unlocks on this page as soon as the machine retires. This writeup is currently locked because the machine is still active on the Hack The Box platform. As per HTB policy, public writeups for active machines are not allowed. To avoid policy violations and potential account restrictions, this writeup will remain locked until the machine is retired. Once retired, the full writeup will be automatically unlocked and made available.
Difficulty: Easy · OS: linux · Category: HTB