┌──(kali㉿kali)-[~]└─$ nmap 10.10.76.129 -v 130 ⨯
Starting Nmap 7.92 ( https://nmap.org ) at 2021-12-11 02:08 EST
Initiating Ping Scan at 02:08
Scanning 10.10.76.129 [2 ports]Completed Ping Scan at 02:08, 0.61s elapsed (1 total hosts)Initiating Parallel DNS resolution of 1 host. at 02:08
Completed Parallel DNS resolution of 1 host. at 02:08, 0.00s elapsed
Initiating Connect Scan at 02:08
Scanning 10.10.76.129 [1000 ports]Discovered open port 22/tcp on 10.10.76.129
Discovered open port 21/tcp on 10.10.76.129
Discovered open port 80/tcp on 10.10.76.129
Increasing send delay for 10.10.76.129 from 0 to 5 due to max_successful_tryno increase to 4Increasing send delay for 10.10.76.129 from 5 to 10 due to max_successful_tryno increase to 5Increasing send delay for 10.10.76.129 from 10 to 20 due to max_successful_tryno increase to 6Increasing send delay for 10.10.76.129 from 20 to 40 due to 11 out of 14 dropped probes since last increase.
Connect Scan Timing: About 28.04% done; ETC: 02:09 (0:01:20 remaining)Completed Connect Scan at 02:09, 67.75s elapsed (1000 total ports)Nmap scan report for 10.10.76.129
Host is up (0.43s latency).
Not shown: 997 closed tcp ports (conn-refused)PORT STATE SERVICE
21/tcp open ftp
22/tcp open ssh
80/tcp open http
Read data files from: /usr/bin/../share/nmap
Nmap done: 1 IP address (1 host up) scanned in 68.42 seconds
new we just need to connect to the port 21 and login with the username groot and password iamgroot.
use the following command:
1
ftp {machine_ip}
it will prompt you for username and password. just login as groot.
1
2
3
4
5
6
7
8
9
10
11
┌──(kali㉿kali)-[~]└─$ ftp 10.10.76.129
Connected to 10.10.76.129.
220(vsFTPd 3.0.3)Name (10.10.76.129:kali): groot
331 Please specify the password.
Password:
230 Login successful.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp>
now you just need to know what contents are avaliable there, to know that use ls command.
1
2
3
4
5
6
ftp> ls
200 PORT command successful. Consider using PASV.
150 Here comes the directory listing.
drwxr-xr-x 2100110014096 Oct 042019 files
226 Directory send OK.
ftp>
as we can see there is a directory called files let’s move into it with command cd files.
1
2
3
ftp> cd files
250 Directory successfully changed.
ftp>
let’s see what files are there. with ls command.
1
2
3
4
5
6
ftp> ls
200 PORT command successful. Consider using PASV.
150 Here comes the directory listing.
-rw-r--r-- 10033 Oct 042019 flag3.txt
226 Directory send OK.
ftp>
as we can see there is a file called flag3.txt let’s download it. with get command.
1
2
3
4
5
6
7
ftp> get flag3.txt
local: flag3.txt remote: flag3.txt
200 PORT command successful. Consider using PASV.
150 Opening BINARY mode data connection for flag3.txt (33 bytes).
226 Transfer complete.
33 bytes received in 0.00 secs (16.0411 kB/s)ftp>
now just close the ftp connection with exit command. then see the contents of the file with cat flag3.txt.
ctf.ac
