Hack The Box — SecNotes: Walkthrough (without Metasploit)

Reconnaissance
Begin with nmap scan.
# Nmap 7.91 scan initiated Thu Mar 25 20:46:22 2021 as: nmap -sV -sC -oN nmap.txt -A -T4 -Pn -p- 10.10.10.97
Nmap scan report for secnotes.htb (10.10.10.97)
Host is up (0.098s latency).
Not shown: 65532 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS…