diff easy

#2025.11.1

Adding the IP to the “/etc/hosts”

sudo nano /etc/hosts

Running the nmap

Documents/htb/2mil
> nmap -Pn -sV -sC 10.10.11.221
Starting Nmap 7.98 ( <https://nmap.org> ) at 2025-11-01 17:25 +0800
Nmap scan report for 10.10.11.221
Host is up (0.25s latency).
Not shown: 998 closed tcp ports (conn-refused)
PORT   STATE SERVICE VERSION
22/tcp open  ssh     OpenSSH 8.9p1 Ubuntu 3ubuntu0.1 (Ubuntu Linux; protocol 2.0)
| ssh-hostkey:
|   256 3e:ea:45:4b:c5:d1:6d:6f:e2:d4:d1:3b:0a:3d:a9:4f (ECDSA)
|_  256 64:cc:75:de:4a:e6:a5:b4:73:eb:3f:1b:cf:b4:e3:94 (ED25519)
80/tcp open  http    nginx
|_http-title: Did not follow redirect to <http://2million.htb/>
Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel

Service detection performed. Please report any incorrect results at <https://nmap.org/submit/> .
Nmap done: 1 IP address (1 host up) scanned in 58.16 seconds

Documents/htb/2mil took 58s
>

Visiting the http on the port 80

image.png

Enumerating the directory

feroxbuster -u <http://2million.htb/> -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt

When i try to register

image.png

It requires the invite code

So i curled the “/invite” directory to get a look at the src code