| ターゲット // Billyboss | |
|---|---|
| Platform | OffSec Proving Grounds |
| OS | Windows |
| Difficulty | Medium |
| IP | 192.168.134.61 |
Enumeration
Nmap
The two ports that matter — a Nexus web service and SMB:
▶ Nmap output
PORT STATE SERVICE VERSION
445/tcp open microsoft-ds
8081/tcp open http Sonatype Nexus Repository Manager OSS 3.21.0-05
A Windows host with a web service on port 8081 — Sonatype Nexus Repository Manager OSS 3.21.0-05. SMB (445) is also exposed, which becomes relevant for privilege escalation later.