Browsed

---

1. Reconnaissance - Surface Discovery

1.1 Port Scanning

We begin with a full TCP scan to ensure no hidden services are missed.

# Aggressive full-range scan with service detection
rustscan -a 10.10.8.1 --ulimit 5000 -r 1-65535 -- -A -sS -Pn -oA browsed

1.2 Scan Results

22/tcp open  ssh     syn-ack OpenSSH 9.6p1 Ubuntu (protocol 2.0)
80/tcp open  http    syn-ack nginx 1.24.0 (Ubuntu)
|_http-title: Browsed

Observations

• SSH likely requires credentials
• Web server is the main attack surface
• Title hints at browser-related functionality

1.3 Host Configuration

During enumeration, multiple virtual hosts are discovered. These must be added locally.

echo "10.10.8.1 browsed.htb browsedinternals.htb" | sudo tee -a /etc/hosts

---

---

🔒

Premium Content

The full exploitation walkthrough, privilege escalation, and flags are available exclusively for members.

Unlock Full Writeup →