ターゲット // Boolean
PlatformOffSec Proving Grounds
OSLinux
DifficultyMedium
IP192.168.159.231

Enumeration

Nmap

▶ Nmap output
PORT      STATE SERVICE VERSION
22/tcp    open  ssh     OpenSSH 7.9p1 Debian 10+deb10u2 (protocol 2.0)
80/tcp    open  http    (Boolean web app)
33017/tcp open  http    Apache httpd 2.4.38 ((Debian))

SSH is a dead end without creds. Two HTTP surfaces: the main Boolean app on port 80 and a separate Apache “Development” vhost on port 33017.