DevArea Writeup - HackTheBox
Medium
Linux
Discovery
Port Scan
┌──(kali㉿kali)-[~]
└─$ scan_tcp_full $TARGET_IP
PORT STATE SERVICE VERSION 21/tcp open ftp vsftpd 3.0.5 | ftp-anon: Anonymous FTP login allowed (FTP code 230) |_drwxr-xr-x 2 ftp ftp 4096 Sep 22 2025 pub 22/tcp open ssh OpenSSH 9.6p1 Ubuntu 3ubuntu13.15 80/tcp open http Apache httpd 2.4.58 |_http-title: DevArea - Connect with Top Development Talent 8080/tcp open http Jetty 9.4.27.v20200227 |_http-title: Error 404 Not Found 8500/tcp open http Golang net/http server |_ This is a proxy server. Does not respond to non-proxy requests. 8888/tcp open http Golang net/http server |_http-title: Hoverfly Dashboard
HTTP on port 80 redirects to devarea.htb. Add it to /etc/hosts:
┌──(kali㉿kali)-[~]
└─$ echo "$TARGET_IP devarea.htb" | sudo tee -a /etc/hosts
Port 8080 is a Jetty instance returning 404, 8888 is a Hoverfly Dashboard, and 8500 is a proxy server that rejects direct connections.
Protected Writeup
This has not retired yet on HackTheBox. We only publish writeups for retired machines and challenges. Once it retires, this writeup will become publicly accessible.