HackTheBox: Build Wrieup

Executive Summary

The "Build" machine demonstrates a complex attack chain involving multiple services in a containerized environment. The exploitation requires:

1. Reconnaissance of internal Docker network via nmap
2. Database enumeration and credential cracking
3. Git service compromise with credential reuse
4. Jenkins backup extraction and decryption
5. RCE via Jenkinsfile modification
6. DNS poisoning through PowerDNS-Admin
7. Legacy rlogin/rsh exploitation with DNS hijacking

Phase 1: Initial Reconnaissance

1.1 External Nmap Service Enumeration

nmap -sV -Pn -T4 10.129.234.169 -oA nmap