CTF Write-Up: HackTheBox — Keeper

This write-up covers the HackTheBox "Keeper" machine — an easy-rated box that teaches important concepts about default credentials and KeePass security.

Enumeration

Starting with an Nmap scan, we discover SSH (22) and HTTP (80) services running. The web server redirects to a Request Tracker instance.

Initial Access

Researching default credentials for Request Tracker reveals that the default admin password is often left unchanged. This gives us access to the admin panel where we find user information.

Privilege Escalation

After gaining initial access via SSH, we discover a KeePass database file. Using known CVEs related to KeePass memory dumps, we can extract the master password and access stored credentials, leading to root access.

Key Takeaways

1. Always change default credentials
2. Keep software updated to patch known vulnerabilities
3. Be careful with sensitive files like password databases
4. Memory dumps can reveal sensitive information