HTB Era has been pwned!

Reconnaissance

Host Enumeration

┌──(kali㉿kali)-[~]
└─$ sudo nano /etc/hosts
10.10.11.79 era.htb file.era.htb

Port Scanning

┌──(kali㉿kali)-[~]
└─$ nmap -sC -sV -oA era 10.10.11.79 
# Nmap 7.95 scan initiated Tue Aug 19 12:58:36 2025 as: /usr/lib/nmap/nmap --privileged -sC -sV -oA era 10.10.11.79
Nmap scan report for era.htb (10.10.11.79)
Host is up (0.13s latency).
Not shown: 998 closed tcp ports (reset)
PORT   STATE SERVICE VERSION
21/tcp open  ftp     vsftpd 3.0.5
80/tcp open  http    nginx 1.18.0 (Ubuntu)
|_http-title: Era Designs
|_http-server-header: nginx/1.18.0 (Ubuntu)
Service Info: OSs: Unix, Linux; CPE: cpe:/o:linux:linux_kernel

Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Tue Aug 19 12:58:53 2025 -- 1 IP address (1 host up) scanned in 16.36 seconds

This box is still active on HackTheBox. Once retired, this article will be published for public access as per HackTheBox’s policy on publishing content from their platform.

For more hints and assistance, come chat with me. You can reach out to me through my other social links in the site footer or menu.

Done!

---

Hi there 👋 Support me!

Life is an echo—what you send out comes back.