Hack The Box-Fawn

目录

TASK 1

TASK 2

TASK 3

TASK 4

TASK 5

TASK 6

TASK 7

TASK 8

TASK 9

TASK 10

TASK 11

SUBMIT FLAG

---

---

TASK 1

---

What does the 3-letter acronym FTP stand for?

File Transfer Protocol (文件传输协议 FTP)

---

TASK 2

---

Which port does the FTP service listen on usually?

21 (ftp一般开放的都是21端口)

---

TASK 3

---

What acronym is used for the secure version of FTP?

sftp

SFTP或安全文件传输协议是一种安全的文件传输协议，使用安全外壳加密为发送和接收文件传输提供高级别的安全性。
SFTP与FTPS的相似之处在于，它使用AES和其他算法来保护数据在不同系统之间传输的安全。

---

TASK 4

---

What is the command we can use to send an ICMP echo request to test our connection to the target?

ping

---

TASK 5

---

From your scans, what version is FTP running on the target?


┌──(root㉿ru)-[~/kali/hackthebox]
└─# nmap -p 21 -sCV  10.129.220.136 --min-rate 10000
Starting Nmap 7.94SVN ( https://nmap.org ) at 2024-02-29 13:38 CST
Nmap scan report for 10.10.14.119 (10.129.220.136)
Host is up (1.7s latency).

PORT   STATE SERVICE VERSION
21/tcp open  ftp     vsftpd 3.0.3
| ftp-anon: Anonymous FTP login allowed (FTP code 230)
|_-rw-r--r--    1 0        0              32 Jun 04  2021 flag.txt
| ftp-syst:
|   STAT:
| FTP server status:
|      Connected to ::ffff:10.10.16.16
|      Logged in as ftp
|      TYPE: ASCII
|      No session bandwidth limit
|      Session timeout in seconds is 300
|      Control connection is plain text
|      Data connections will be plain text
|      At session startup, client count was 4
|      vsFTPd 3.0.3 - secure, fast, stable
|_End of status
Service Info: OS: Unix

Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 47.85 seconds



vsftpd 3.0.3

---

TASK 6

---

From your scans, what OS type is running on the target?


Unix

---

TASK 7

---

What is the command we need to run in order to display the 'ftp' client help menu?


ftp -h

---

TASK 8

---

What is username that is used over FTP when you want to log in without having an account?

anonymous（匿名登录）

---

TASK 9

---

What is the response code we get for the FTP message 'Login successful'?


230 (ftp 登录成功)

---

TASK 10

---

There are a couple of commands we can use to list the files and directories available on the FTP server. 
One is dir. What is the other that is a common way to list files on a Linux system.

ls (列出文件)

---

TASK 11

---

What is the command used to download the file we found on the FTP server?

get (下载ftp服务器文件命令！)

---

SUBMIT FLAG

---

---

使用匿名登陆！ anonymous

---

---

使用get命令下载到本地！

┌──(root㉿ru)-[~/kali/hackthebox]
└─# cat flag.txt
035db21c881520061c53e0536e44f815

---