Need help with starting point

HTB Content Machines
1

Hey all,

I am new to Hack the Box and I want to learn the basics with the starting point machines and I discovered a few problems. I am using the walkthrough to learn the basics. But even if I use the same Command with a new IP Address, I ran into different results.
For example, at the level “Three”. I used the same command to discover subdomains, but don’t find any. If I want to visit s3.thetoppers.htb Firefox can’t find the page.
Sometimes I reset the machine and it will work. I like HTB, but it needs to work properly. Is this caused by an overload with multiple users? Do the instances change? What can I do?

Thanks for your help,

2

Hi,
there should be no problem. I’ve done this 2 weeks ago and I use gobuster vhost since then.

Since Firefox might cause issues, did you try to use other browsers or the “curl” command to check that you do have connection?. Don’t forget to add a new list in your /etc/hosts.

3

Yes, I added the domain in /etc/hosts.

That’s my output with gobuster vhost.

===============================================================
Starting gobuster in VHOST enumeration mode

Found: 1 Status: 400 [Size: 306]
Found: 11192521404255 Status: 400 [Size: 306]
Found: 11192521403954 Status: 400 [Size: 306]
Found: gc._msdcs Status: 400 [Size: 306]
Found: 2 Status: 400 [Size: 306]
Found: 11285521401250 Status: 400 [Size: 306]
Found: 2012 Status: 400 [Size: 306]
Found: 11290521402560 Status: 400 [Size: 306]
Found: 123 Status: 400 [Size: 306]
Found: 2011 Status: 400 [Size: 306]
Found: 3 Status: 400 [Size: 306]
Found: 4 Status: 400 [Size: 306]
Found: 2013 Status: 400 [Size: 306]
Found: 2010 Status: 400 [Size: 306]
Found: 911 Status: 400 [Size: 306]
Found: 11 Status: 400 [Size: 306]
Found: 24 Status: 400 [Size: 306]
Found: 10 Status: 400 [Size: 306]
Found: 7 Status: 400 [Size: 306]
Found: 99 Status: 400 [Size: 306]
Found: 2009 Status: 400 [Size: 306]
Found: www.1 Status: 400 [Size: 306]
Found: 50 Status: 400 [Size: 306]
Found: 12 Status: 400 [Size: 306]
Found: 20 Status: 400 [Size: 306]
Found: 2008 Status: 400 [Size: 306]
Found: 25 Status: 400 [Size: 306]
Found: 15 Status: 400 [Size: 306]
Found: 5 Status: 400 [Size: 306]
Found: www.2 Status: 400 [Size: 306]
Found: 13 Status: 400 [Size: 306]
Found: 100 Status: 400 [Size: 306]
Found: 44 Status: 400 [Size: 306]
Found: 54 Status: 400 [Size: 306]
Found: 9 Status: 400 [Size: 306]
Found: 70 Status: 400 [Size: 306]
Found: 01 Status: 400 [Size: 306]
Found: 16 Status: 400 [Size: 306]
Found: 39 Status: 400 [Size: 306]
Found: 6 Status: 400 [Size: 306]
Found: www.123 Status: 400 [Size: 306]
Progress: 4989 / 4990 (99.98%)

Finished

4

Please, when you need assistance post the command you used. Every tool have ALOT of flags that can make the tool work differently.

In your case, you should append the domain to let gobuster know which domain is targeted.

gobuster vhost \
-w /usr/share/wordlists/Discovery/DNS/subdomains-top1million-20000.txt \
-u 10.10.11.11 \
--append-domain --domain thetoppers.htb

The results will (almost) look like this:

Found: s3.thetoppers.htb Status: 302 [Size: 0] [--> /]
5

Thank you very much. Now it worked. I used the url with the -u flag, as described in the walkthrough. With the ip Adress and --append-domain it is working. Thanks.

1 Like