Welcome to Guardian (HTB), the university where passwords are weaker than cafeteria coffee.
In this thrilling adventure, we’ll go from being a freshman student with identified creds → to hijacking lecturers → impersonating admins → and finally crowning ourselves the Root Principal. 🎓👑
🎬 Act 1 – Enrollment Day (Initial Foothold)
Every heist starts with recon. We scan the gates:
nmap -sC -sV -oA guardian guardian.htb
Ports revealed:
22 → SSH
80 → HTTP (Apache)
Visiting http://guardian.htb shows the Student Portal.
Like every lazy sysadmin, they left default creds in place:
Username: GU0142023
Password: GU1234
💥 Welcome to Guardian University, rookie hacker. You’re officially a student!
