Code

---

Reconnaissance

Realizaremos un reconocimiento con nmap para ver los puertos que están expuestos en la máquina Code. Este resultado lo almacenaremos en un archivo llamado allPorts.

❯ nmap -p- --open -sS --min-rate 1000 -vvv -Pn -n 10.129.26.136 -oG allPorts
Host discovery disabled (-Pn). All addresses will be marked 'up' and scan times may be slower.
Starting Nmap 7.95 ( https://nmap.org ) at 2025-03-23 15:55 CET
Initiating SYN Stealth Scan at 15:55
Scanning 10.129.26.136 [65535 ports]
Discovered open port 22/tcp on 10.129.26.136
Discovered open port 5000/tcp on 10.129.26.136
Completed SYN Stealth Scan at 15:55, 15.14s elapsed (65535 total ports)
Nmap scan report for 10.129.26.136
Host is up, received user-set (0.069s latency).
Scanned at 2025-03-23 15:55:37 CET for 15s
Not shown: 65533 closed tcp ports (reset)
PORT     STATE SERVICE REASON
22/tcp   open  ssh     syn-ack ttl 63
5000/tcp open  upnp    syn-ack ttl 63

Read data files from: /usr/share/nmap
Nmap done: 1 IP address (1 host up) scanned in 15.26 seconds
           Raw packets sent: 66061 (2.907MB) | Rcvd: 66068 (2.643MB)

⚠️ This box is still active on HackTheBox. Once retired, this article will be published for public access as per HackTheBox’s policy on publishing content from their platform.

If you need a hint or want to discuss anything related to the box, feel free to reach out to me on Discord.