🔑 Initial Access

1. Anonymous Access

Gaining initial access was straightforward due to the enabled anonymous login on the FTP service. This allowed me to interact with the file system without a valid user account.

Steps taken:

  1. Connected to the target using the ftp utility.
  2. Supplied anonymous as the username.
  3. Verified access with the ls command.


2. Capturing the Flag

I used the get command to exfiltrate the flag from the server to my local machine.

Command:

ftp> get flag.txt

Outcome: The file was successfully downloaded.


Next Step