Hack The Box: MonitorsFour

Enum mairon $ rustscan -a 10.129.8.223 --ulimit 5000 -- -A -sCV -oN mo nitorsfour.txt .----. .-. .-. .----..---. .----. .---. .--. .-. .-. | {} }| { } |{ {__ {_ _}{ {__ / ___} / {} \ | `| | | .-. \| {_} |.-._} } | | .-._} }\ }/ /\ \| |\ | `-' `-'`-----'`----' `-' `----' `---' `-' `-'`-' `-' The Modern Day Port Scanner. ________________________________________ : http://discord.skerritt.blog : : https://github.com/RustScan/RustScan : -------------------------------------- RustScan: Where scanning meets swagging. 😎 [~] The config file is expected to be at "/home/gkroon/.rustscan.toml" [~] Automatically increasing ulimit value to 5000. Open 10.129.8.223:80 Open 10.129.8.223:5985 [~] Starting Script(s) [>] Running script "nmap -vvv -p {{port}} -{{ipversion}} {{ip}} -A -sCV -oN monitorsfour.txt" on ip 10.129.8.223 Depending on the complexity of the script, results may take some time to appear. [~] Starting Nmap 7.98 ( https://nmap.org ) at 2026-01-29 19:59 +0100 NSE: Loaded 158 scripts for scanning. NSE: Script Pre-scanning. NSE: Starting runlevel 1 (of 3) scan. Initiating NSE at 19:59 Completed NSE at 19:59, 0.00s elapsed NSE: Starting runlevel 2 (of 3) scan. Initiating NSE at 19:59 Completed NSE at 19:59, 0.00s elapsed NSE: Starting runlevel 3 (of 3) scan. Initiating NSE at 19:59 Completed NSE at 19:59, 0.00s elapsed Initiating Ping Scan at 19:59 Scanning 10.129.8.223 [2 ports] Completed Ping Scan at 19:59, 0.01s elapsed (1 total hosts) Initiating Connect Scan at 19:59 Scanning monitorsfour.htb (10.129.8.223) [2 ports] Discovered open port 80/tcp on 10.129.8.223 Discovered open port 5985/tcp on 10.129.8.223 Completed Connect Scan at 19:59, 0.01s elapsed (2 total ports) Initiating Service scan at 19:59 Scanning 2 services on monitorsfour.htb (10.129.8.223) Completed Service scan at 19:59, 6.06s elapsed (2 services on 1 host) NSE: Script scanning 10.129.8.223. NSE: Starting runlevel 1 (of 3) scan. Initiating NSE at 19:59 Completed NSE at 19:59, 5.05s elapsed NSE: Starting runlevel 2 (of 3) scan. Initiating NSE at 19:59 Completed NSE at 19:59, 0.08s elapsed NSE: Starting runlevel 3 (of 3) scan. Initiating NSE at 19:59 Completed NSE at 19:59, 0.00s elapsed Nmap scan report for monitorsfour.htb (10.129.8.223) Host is up, received syn-ack (0.0090s latency). Scanned at 2026-01-29 19:59:09 CET for 11s PORT PORT STATE SERVICE REASON VERSION 80/tcp open http syn-ack nginx |_http-favicon: Unknown favicon MD5: 889DCABDC39A9126364F6A675AA4167D | http-methods: |_ Supported Methods: GET | http-cookie-flags: | /: | PHPSESSID: |_ httponly flag not set |_http-title: MonitorsFour - Networking Solutions 5985/tcp open http syn-ack Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP) |_http-title: Not Found |_http-server-header: Microsoft-HTTPAPI/2.0 Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows NSE: Script Post-scanning. NSE: Starting runlevel 1 (of 3) scan. Initiating NSE at 19:59 Completed NSE at 19:59, 0.00s elapsed NSE: Starting runlevel 2 (of 3) scan. Initiating NSE at 19:59 Completed NSE at 19:59, 0.00s elapsed NSE: Starting runlevel 3 (of 3) scan. Initiating NSE at 19:59 Completed NSE at 19:59, 0.00s elapsed Read data files from: /usr/bin/../share/nmap Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 11.44 seconds ...

January 29, 2026 Â· 10 min

Protecting OpenWrt using CrowdSec (via Syslog)

OpenWrt is an open source Linux project aimed at embedded devices to route network traffic (e.g. routers). I’ve consistently run OpenWrt on my home routers for over a decade now (I still remember the brief LEDE split), and it has since been my preferred home router OS. While I’ve also wanted to experiment with OPNsense (and pfSense before), I’ve never had a real reason to thus far, but I digress…​ It might be interesting to add some network security such as intrusion prevention to your residential gateway directly. You might of old be familiar with Fail2Ban, and I’ve happily used Fail2Ban for years. CrowdSec is a similar solution, albeit more community-driven. Klaus Agnoletti, then (still?) head of community at CrowdSec, summarised the similarities and differences between the two: ...

October 29, 2025 Â· 8 min

Home Assistant on TrueNAS Community (SCALE)

My previous post discussed how to get a headless Steam instance running on TrueNAS SCALE. I had a spare GPU which I wanted to repurpose to play (older) video games without first needing to boot my desktop. This post roughly documents how I run my Home Assistant instance on my TrueNAS SCALE server. The official website details several installation methods, which mainly comes down to two installation types: either a full-fledged OS image (HA OS), or; a (less feature-complete) containerised version. ...

September 13, 2025 Â· 2 min

Hashcat on Docker

I finally got hashcat running on Docker, with GPU support for NVIDIA cards. First, I needed to install Docker and NVIDIA Container Toolkit on my system, and add my user to the docker group. root $ pacman -S --needed docker nvidia-container-toolkit root $ systemctl enable --now docker.service root $ usermod -aG docker user Then I created a Dockerfile to set up the hashcat environment with NVIDIA support (using a BlackArch image): FROM blackarchlinux/blackarch:latest RUN pacman -Syu --noconfirm && \ pacman -S --noconfirm \ blackarch/cracken \ blackarch/pack \ blackarch/pipal \ extra/hashcat \ extra/hashcat-utils RUN mkdir -p /etc/OpenCL/vendors && \ echo "libnvidia-opencl.so.1" > /etc/OpenCL/vendors/nvidia.icd RUN mkdir /cracking...

June 19, 2025 Â· 1 min

Steam Headless on TrueNAS Community (SCALE)

After watching Lawrence Systems' video about why it’s time to move off TrueNAS CORE—​which I had been putting off for too long already—​I finally migrated to Community (SCALE). I guess it was the last push I needed, really. I even migrated most of my services inside my VMs to either separate TrueNAS Apps, or vanilla docker containers I manage via Dockge (such as Nextcloud AIO). But then I also noticed another available TrueNAS App which piqued my interest: Steam Headless. ...

June 18, 2025 Â· 2 min