Platform: Hack The Box Fortress
IP: 10.13.37.14
Date: 2025-11-12
Author: x4cc3
Linux machine with an exposed .git directory on port 80 and a custom stats service on port 8888.
| Port | Service |
|---|---|
| 22/tcp | SSH |
| 80/tcp | nginx (exposed .git) |
| 8888/tcp | Custom "FaradaySEC stats" service |
The .git directory leaks source code including commit history. The port 8888 service asks for a username and validates input.
Note: This writeup is limited to initial reconnaissance in the original notes.