Hack The Box - HTB Reactor Writeup - Easy - Weekly - May 23th, 2026

May 23, 2026

Box: Reactor OS: Linux Difficulty: Easy Target IP: Attacker IP: ( tun0 ) 1. Reconnaissance 1.1 Port Scan A full TCP port sweep followed by a targeted service/version scan: nmap -Pn -p- --min-rate=2000 -oN nmap-full.txt nmap -sC -sV -p 22,3000 -oN nmap-svc.txt Open ports: Port Service Notes 22 SSH OpenSSH — used later for the foothold and tunnel 3000 HTTP X-Powered-By: Next.js web application The web service runs on 3000, not 80/443. The application is Next.js (v15.0.3) — a React Server Components (RSC) framework, which is the key detail that drives the foothold. 1.2 Web Fingerpri…