HTB Blue


Run a nmap scan to find for open ports.

Let’s use an nmap vulnerability script to find for more clues.
Found a CVE.

Start up metasploit.

Search for smbv1 and use the eternalblue exploit.
Set up the necessary option values.

Run the exploit.

Session is gained.

Change directory to user Harris desktop to get the user flag.

Head to the root desktop to get the root flag.