> ## Documentation Index
> Fetch the complete documentation index at: https://hackwithmike.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Eloquia (Insane) - HTB

> Windows | Released on 13th December, 2025 | Created by Spectra199

## Starting the box

***

<img src="https://mintcdn.com/hackwithmike/a1Ajnby1lAXa62Dj/assets/images/htb/eloquia/pwned.png?fit=max&auto=format&n=a1Ajnby1lAXa62Dj&q=85&s=e88d9413dac35b2cdc466c6507a31229" noZoom width="851" height="818" data-path="assets/images/htb/eloquia/pwned.png" />

Link to the box: [https://app.hackthebox.com/machines/eloquia](https://app.hackthebox.com/machines/eloquia)

### Port Scan

We start off the box by running a port scan on the provided IP.

```sh title="Attacker Linux" icon="linux" theme={null}
rustscan --ulimit 5000 -a 10.129.10.149 -r 1-65535 -- -A -vvv -oN Eloquia
```

Output of Rustscan

```text title="Terminal Output" icon="file-lines" theme={null}
Open 10.129.10.149:80
Open 10.129.10.149:5985
```

Output of Nmap:

```text title="Terminal Output" icon="file-lines" theme={null}
PORT     STATE SERVICE REASON          VERSION                                                                                                               
80/tcp   open  http    syn-ack ttl 127 Microsoft IIS httpd 10.0
|_http-favicon: Unknown favicon MD5: 7487AC79D09DE6E54F3DF799C6B5B14A
|_http-title: Eloquia
|_http-server-header: Microsoft-IIS/10.0
| http-methods:                           
|_  Supported Methods: GET HEAD OPTIONS
5985/tcp open  http    syn-ack ttl 127 Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP) 
|_http-server-header: Microsoft-HTTPAPI/2.0
|_http-title: Not Found
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Microsoft Windows 2019|10 (97%)
OS CPE: cpe:/o:microsoft:windows_server_2019 cpe:/o:microsoft:windows_10
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
Aggressive OS guesses: Windows Server 2019 (97%), Microsoft Windows 10 1903 - 21H1 (91%)
```

A few key notes:

* Port 80 - Web Server is open, redirects to [http://eloquia.htb/](http://eloquia.htb/).
* Port 5985 - WinRM is open.

### Edit the Hosts file

As always, we edit the `/etc/hosts` file to add the hostname:

```sh title="Attacker Linux" icon="linux" theme={null}
sudo nano /etc/hosts
```

/etc/hosts

```text title="Nano Interface" icon="file-lines" theme={null}
10.129.10.149 eloquia.htb
```

## Active Box

***

<Warning>This box is currently still active on Hack the Box - Full writeup will be available when the box is retired.  Feel free to reach out to me on [LinkedIn](https://linkedin.com/in/michael-kh-chan) or [Discord](https://discord.com/users/631538127541895188) for nudges & sanity checks.</Warning>