nibbles is a fairly simple machine, however with the inclusion of a login blacklist, it is a fair bit more challenging to find valid credentials. luckily, a username can be enumerated and guessing the correct password does not take long for most. This is my first box and also my first writeup.

---

🕵️ Enumeration

After spawning the machine and connecting to the VPN, we start with the initial enumeration.