Skip to main content

      Netmon-htb

      The quickest path to the user flag involves the FTP service:

      Searching through the PRTG configuration files (typically in C:\ProgramData\Paessler\PRTG Network Monitor ) reveals backup configuration files. Phase 3: Privilege Escalation (PRTG Exploitation) netmon-htb

      You can log in via FTP using the username anonymous and no password. The quickest path to the user flag involves

      In an old configuration backup (e.g., PRTG Configuration.old.bak ), you may find a password like PrTg@dmin2018 . PRTG Configuration.old.bak )

      is an "Easy" rated Windows machine on Hack The Box that focuses on misconfigurations and information disclosure within the PRTG Network Monitor application. Phase 1: Initial Enumeration

      If the 2018 password fails on the live login page, updating it to the current year (e.g., PrTg@dmin2019 ) often works, as highlighted by Faisal Husaini .

      Set my preferences

      You can decide how we use cookies on your device by adjusting the settings below. Click on “Accept all” if you accept all cookies. In this list of cookies you can choose the cookies that you would like to accept. If you do not accept the Google Analytics cookies to be stored, please leave the box unchecked. If you do not accept the Microsoft application insight cookies to be stored, please uncheck the box. All other cookies are considered as strictly necessary in order for you to be able to use and interact with the website and can therefore not be unselected. When you have made your choice, scroll down the list and then click on the “Confirm my choices” button in the bottom of the list. Please be aware that if you disable cookies you will not have access to the full functionality of the website.

      Click here to read our cookie policy
      • Name:
        _ga

        Used to distinguish users. A unique identifier associated with each user is sent with each hit in order to determine which traffic belongs to which user. This cookie enables the website's owner to track a visitor’s behavior and measure the website's performance. The main purpose of this cookie is to improve the website's performance.

        Name:
        _gat

        Used to throttle request rates for information on the website. This cookie does not store any user information. The main purpose of this cookie is to improve the website's performance.

        Name:
        _gid

        Used to distinguish users. This cookie enables the website's owner to track a visitor’s behavior and measure the website's performance. The main purpose of this cookie is to improve the website's performance.

      • Name:
        ai_session

        Speeds up page loading times and overrides any security restrictions that may be applied to a browser based on the IP address from which it comes.

        Name:
        ai_user

        Unique user identifier cookie for counting the number of users accessing an application over time.

      • Name:
        ARRAffinity

        Routes the request made through a web browser to the same machine in the DXC cloud environment. See ARRAffinity - Microsoft Azure. This cookie is deleted when you close your browser.

      • Name:
        __cfuid

        Speeds up page loading times and overrides any security restrictions that may be applied to a browser based on the IP address from which it comes.

      • Name:
        CookiesAccept

        Used to keep track of whether the user has accepted the cookie usage or not. This is not set unless the visitor has clicked on "Accept" in the cookie banner in the bottom of the website. The main purpose of this cookie is to improve the website's performance.

      • Name:
        EPiForm_{FormGuid}:{Username}

        Stores partial form submissions so that a visitor can continue with a form submission upon return. One cookie is created for each form and each logged in visitor. Stores the current submission status of the form (formGuid, submissionID, and if submission is finalized or not).

        Name:
        .EPiForm_BID

        Identifies the form submission made to the site when a visitor submits data via an Episerver form. Stores a GUID as the browser ID.

        Name:
        .EPiForm_VisitorIdentifier

        Identifies the form submission to the site when a visitor submits data to via an Episerver form. Stores a GUID which is the visitor identifier. Persistent (90 days from creation).

      • Name:
        EPI-MAR-<Content GUID>

        Records a visitor’s interaction with a running website optimization test, to ensure that a visitor has a consistent experience.

      • Name:
        ASP.NET_SessionId

        Used to keep track of a user navigating through the website. This is used to transfer information between pages and to store information that the user might reuse on different pages. The main purpose of this cookie is to improve the website's performance.

      Sorry, www.securitas.com does not support Internet Explorer. To enjoy our website, try using a newer browser like Chrome, Safari, Firefox, or Edge.