Linux

Hack The Box - HTB DutyBound Medium - Weekly - October 24th, 2026

October 24, 2026

Target: ( dutybound.htb / vhost airsnacks.htb ) OS / Difficulty: Linux · Medium Date: 2026-10-29 Attacker VPN IP: 0. Lab setup HTB's VPN tunnel can silently black-hole large outbound packets at the default 1500 MTU (TLS, big POST bodies). Dropped it to 1300 up front, and mapped the vhosts: sudo ip link set dev tun0 mtu 1300 echo " dutybound.htb airsnacks.htb" | sudo tee -a /etc/hosts 1. Recon Port scan nmap -sT -T4 --min-rate 1000 -p- -oN nmap/allports.txt nmap -sV -sC -p22,80,443 -oN nmap/services.txt 22/tcp open ssh OpenSSH 8.9p1 Ubuntu 3ubuntu0.18 (Ubuntu 22.04) 80/tcp open http n…