CCTV Writeup - HackTheBox
Easy
Linux
Discovery
To start this box we need to do some discovery of services. We can do this with a NMAP scan like:
┌──(kali㉿kali)-[~]
└─$ scan_tcp_full $TARGET_IP
[+] Discovering all open TCP ports... Starting Nmap 7.98 ( https://nmap.org ) at 2026-03-07 20:05 +0100 Nmap scan report for 10.129.1.41 Host is up (0.015s latency). Not shown: 60788 closed tcp ports (reset), 4745 filtered tcp ports (no-response) Some closed ports may be reported as filtered due to --defeat-rst-ratelimit PORT STATE SERVICE 22/tcp open ssh 80/tcp open http Nmap done: 1 IP address (1 host up) scanned in 14.60 seconds [+] Parsing open TCP ports... [+] Running scripts & versions on TCP ports: 22,80 Starting Nmap 7.98 ( https://nmap.org ) at 2026-03-07 20:05 +0100 Nmap scan report for 10.129.1.41 Host is up (0.010s latency). PORT STATE SERVICE VERSION 22/tcp open ssh OpenSSH 9.6p1 Ubuntu 3ubuntu13.14 (Ubuntu Linux; protocol 2.0) | ssh-hostkey: |_ 256 76:1d:73:98:fa:05:f7:0b:04:c2:3b:c4:7d:e6:db:4a (ECDSA) 80/tcp open http Apache httpd 2.4.58 |_http-title: Did not follow redirect to http://cctv.htb/ Service Info: Host: default; OS: Linux; CPE: cpe:/o:linux:linux_kernel Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 70.37 seconds
This reveals us theres a CCTV web page which we can add to our /etc/hosts file with:
┌──(kali㉿kali)-[~]
└─$ addhost $TARGET_IP cctv.htb
[+] Added: 10.129.1.41 → cctv.htb
Then we check if the domain is working with a simple CURL command:
┌──(kali㉿kali)-[~]
└─$ curl -I cctv.htb
HTTP/1.1 200 OK Date: Sat, 07 Mar 2026 19:09:11 GMT Server: Apache/2.4.58 (Ubuntu) Last-Modified: Sat, 13 Sep 2025 21:58:50 GMT ETag: "1821-63eb5e019e8b3" Accept-Ranges: bytes Content-Length: 6177 Vary: Accept-Encoding Content-Type: text/html
Explain command
| -I | Send a HEAD request and display only the response headers. |
| cctv.htb | Target hostname to send the HEAD request to. |
When we look through this website we can find links to https://cctv.htb/zm/ which is a login screen for ZoneMinder.
Protected Writeup
This has not retired yet on HackTheBox. We only publish writeups for retired machines and challenges. Once it retires, this writeup will become publicly accessible.