http://www.adhikariashwin0.com.np/tags/cve-2025-32463/ Recent content in CVE-2025-32463 on the008Killer Hugo en Mon, 09 Mar 2026 00:00:00 +0000 http://www.adhikariashwin0.com.np/writeups/hackthebox/expressway/ Mon, 09 Mar 2026 00:00:00 +0000 http://www.adhikariashwin0.com.np/writeups/hackthebox/expressway/ <h2 id="-overview">🛠 Overview</h2> <table style="width:100%; table-layout:fixed;"> <thead> <tr> <th style="width:40%; text-align:left;">Category</th> <th style="width:60%; text-align:left;">Info</th> </tr> </thead> <tbody> <tr><td>Machine Name</td><td>Expressway</td></tr> <tr><td>Difficulty</td><td>Easy</td></tr> <tr><td>Release Date</td><td>20 Sep 2025</td></tr> <tr><td>Author</td><td>dakkmaddy</td></tr> <tr><td>OS</td><td>Linux</td></tr> <tr><td>Pwned Date</td><td>21 Sep 2025</td></tr> </tbody> </table> <hr> <h2 id="1-reconnaissance">1. Reconnaissance</h2> <p>Initial reconnaissance was performed using <strong>RustScan</strong> to quickly identify open TCP ports on the target <code>10.10.11.87</code>. RustScan results:</p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"><span class="line"><span class="cl">Open ports discovered: </span></span><span class="line"><span class="cl">- 22/tcp <span class="o">(</span>SSH<span class="o">)</span> </span></span></code></pre></div><h3 id="observations-from-rustscan">Observations from RustScan</h3> <ul> <li>Host responded to ICMP echo requests (TTL=63).</li> <li>Only SSH was open over TCP.</li> <li>File descriptor limits were noted to be low, suggesting potential speed issues in large scans.</li> </ul> <p>A follow-up <strong>UDP scan</strong> revealed:</p>