Skip to main content
CPEBuddy
HackTheBox - Eureka

HackTheBox - Eureka

Source: YouTube · IppSec · published Aug 30, 2025 · 47:38

Penetration Testing
No ratings yet Log in to rate
Transcript Available
Description

This video demonstrates a CTF walkthrough for the Hack The Box machine "Eureka," highlighting how exposed Spring Boot actuator endpoints can lead to credential theft via heap dumps.

Key Takeaways:
• The machine is categorized as "Hard" but relies heavily on reconnaissance to identify the backend framework as Spring Boot 0:07.
• Enumerating the system reveals exposed actuator endpoints, specifically the heap dump, which can be easily found using tools like Nuclei 0:10.
• The heap dump contains sensitive credentials, which can be extracted using various methods including basic string parsing, VisualVM for OQL queries, or specialized tools like JDumpSpider 0:16.
• Once credentials are obtained, the attacker discovers that Eureka service discovery is running on the server 0:35.

The walkthrough emphasizes that while the machine is technically difficult, the initial access vector is straightforward if one knows where to look.

Sources:

  • 0:07 Introduction to the Eureka machine difficulty and focus on recon.
  • 0:10 Identifying Spring Boot actuator endpoints using Nuclei.
  • 0:16 Extracting credentials from the heap dump using multiple tools.
  • 0:35 Discovery of the running Eureka service.

Generate CPE Credits

Generate a professional CPE document from this video's transcript.

Estimated credit: 1 CPE hours

Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.

Topic: Penetration Testing. Commonly maps to: Security Assessment and Testing, Security Operations. Exact CISSP domains are assigned during generation.

CISSP Domain Mapping
Learning Objectives
Self-Assessment Questions
PDF Export Ready

Free account. One generation at a time, with a daily limit.

CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.

Watch on YouTube

Transcript Preview

First 800 characters of the transcript

What's going on YouTube? This is IPSC and we'll be doing Eureka from hack the box which if you're good at recon this could be on the easier side of hard. The first tricky part is enumerating the backend framework is spring boot which helps you find that the actuator endpoints are exposed namely the heap dump one. It can be tricky to find but if you run a tool like nuclei it will automatically show it without any um specialized word list or things like that. In the heap dump you find credentials. I'll show exploring it several ways. first with strings, then we'll use a tool called visual VM which lets us do OQL queries that can view information of the heap dump and then finally we'll use a specialized tool called JD dump spider. Once here we discover Eureka is running which is a service dis…