MakeSense Writeup - HackTheBox

Medium Linux

Discuss on Discord

Last updated July 4, 2026 • 9 min read

Joshua

HackIndex Creator

Would you like to solve this machine together? Join our discord and/or our open HTB team!

Domain: makesense.htb

Join the HackIndex community

Share writeups, ask questions, and stay current with techniques. Over 200 members.

Join Discord

Reconnaissance

Add the target to hosts and run a full TCP scan.

┌──(kali㉿kali)-[~]

└─$ addhost $TARGET_IP $DOMAIN

┌──(kali㉿kali)-[~]

└─$ nmap -p- -T4 --min-rate 1000 --open $TARGET_IP

┌──(kali㉿kali)-[~]

└─$ nmap -sC -sV -p 22,443 $TARGET_IP

PORT    STATE SERVICE
22/tcp  open  ssh
443/tcp open  ssl/http

22/tcp  open  ssh      OpenSSH 9.6p1 Ubuntu
443/tcp open  ssl/http Apache 2.4.58
|_http-generator: WordPress 7.0
|_http-title: Agency LLC

Only SSH and HTTPS. No mail, no other web ports. Everything routes through the WordPress app.

Run wpscan against the theme and users.

┌──(kali㉿kali)-[~]

└─$ wpscan --url https://$DOMAIN --enumerate u,vp,vt --disable-tls-checks

[+] webagency
 | Location: https://$DOMAIN/wp-content/themes/webagency/
 | Version: 1.0 (80% confidence)
 | Author: WebAgency Team

[+] User(s) Identified:
[+] walter
[+] admin
[+] jake

Protected Writeup

This has not retired yet on HackTheBox. We only publish writeups for retired machines and challenges. Once it retires, this writeup will become publicly accessible.