Enumeration
As usual, let's start with nmap:
nmap -sV -sC IP
Replace IP by the IP of the target machine (Fawn)
Note: The IP of the target machines are always changing so make sure you type the correct one. You can find it on your Hack The Box account.
We can see that port 21 is open on the target machine. Port 21 is associated with FTP (File Transfer Protocol).
Notice the line : ftp-anon: Anonymous FTP login allowed
This means that this FTP server has been misconfigured and we can use the username anonymous to login! When we are prompted to enter a password for anonymous, we should be able to enter whatever we want because the server will disregard the password for the anonymous account.
Let's see if that works!
Foothold
ftp 10.129.252.202
Type:
anonymous
and press enter
When prompted to enter a password, type whatever you like and press enter.
We are in!
Let's list the files available in our current directory using:
ls
There is a file called flag.txt This seems interesting!
Let's use the get command to download this file directly onto our VM:
get flag.txt
Now go to your home directory and the you can see flag.txt is there.
Open the file flag.txt
Congratulations! You got the flag!
if you are stuck, try typing pass into your ftp.
FTP>pass
I get FTP command not found