https://mdunn99.com/tags/cve-2025-49132/Recent content in Cve-2025-49132 on Mike's LogsHugoen<a href="https://creativecommons.org/licenses/by-nc/4.0/" target="_blank" rel="noopener">CC BY-NC 4.0</a>Fri, 03 Apr 2026 00:00:00 +0000https://mdunn99.com/posts/pterodactyl-htb/Fri, 03 Apr 2026 00:00:00 +0000https://mdunn99.com/posts/pterodactyl-htb/<p>Pterodactyl is a medium difficulty Linux HackTheBox machine: <a href="https://app.hackthebox.com/machines/Pterodactyl?sort_by=created_at&amp;sort_type=desc">https://app.hackthebox.com/machines/Pterodactyl?sort_by=created_at&sort_type=desc</a></p> <h1 id="reconnaissance">Reconnaissance</h1> <p>I ran a standard nmap service scan:</p> <pre tabindex="0"><code class="language-nmap" data-lang="nmap">Not shown: 986 filtered tcp ports (no-response), 10 filtered tcp ports (admin-prohibited) PORT STATE SERVICE VERSION 22/tcp open ssh OpenSSH 9.6 (protocol 2.0) 80/tcp open http nginx 1.21.5 443/tcp closed https 8080/tcp closed http-proxy </code></pre><p>I navigated to the web server, which had an unresolvable domain name: pterodactyl.htb. I added the IP to my hosts to resolve it in my browser: <img src="https://mdunn99.com/posts/pterodactyl-htb/monitorland_page.png" alt=""></p>