https://nabilkara.github.io/tags/cms/Recent content in CMS on Nabil Kara — CTF WriteupsHugoenWed, 03 Jun 2026 00:00:00 +0000https://nabilkara.github.io/posts/htb/facts/Wed, 03 Jun 2026 00:00:00 +0000https://nabilkara.github.io/posts/htb/facts/<ul> <li> <p>Difficulty: Easy</p> </li> <li> <p>OS: Linux</p> </li> <li> <p>Author: LazyTitan333</p> </li> </ul> <p><img src="https://nabilkara.github.io/posts/htb/facts/solved.png" alt=""></p> <p>An initial nmap scan reveals two open ports : <code>80</code> (HTTP) and <code>23</code> (SSH)</p> <p><img src="https://nabilkara.github.io/posts/htb/facts/pasted-image-20260602233327.png" alt=""></p> <p>We start by exploring the web page : <img src="https://nabilkara.github.io/posts/htb/facts/pasted-image-20260602233347.png" alt=""></p> <p>If we click <code>Start Exploring</code> we see a couple of facts , a search bar and a comments section. I browsed the facts and found nothing useful , except that the comments profiles are potential SSH usernames. We opt for directory enumeration ,for instance, we can use ffuf :</p>