foreign hey guys I hope you're doing fantastic and today we're going to take
a look at learn the basics of penetration testing with hack the box today we are on
number two fonts so let's get this show on the road so first things first I need
to connect my VPN so I'll do that real quick I'm going to launch my terminal here
starting point right there now we are going to refresh the page see if this is working now so
when this is working we're going to spin the machine there you go all right so I'm going to
spawn the machine now let's wait for just a few perfect so all reset first question task number
one so what does the three letter acronym FTP stand for that is easy file transfer protocol
and yes okay which Port does FTP Service listen on usually usually is port number 21 right very
insecure protocol because it transmits information in clear text what Ackerman is used for the secure
version of FTP there's two of them so the there is SFTP and there is ftps ftps is FTP over SSL
and SFTP is the transmission from ftps through SSH so it's actually in Port 22 not 21 just so
you know so that should be as FTP there you go and what is the command we can use to send an
icmp echo request we saw that in the last lab so that one is easy is Ping p-i-n-g submit and
from your scans web version of FTP is running so let's do a scan and in this case we're going to
do let me just copy the address here there you go so copy click and uh and map SV assess the
version as well we're gonna do some vervos there you go and of course let's do the port so p21
perfect there you go so you can see that Port 21 TCP is open and it's vsftpd copy this Ctrl shift
C let's place this in here submit the answer in voila yes okay from your scans what OS is
running this target okay so let's uh take a look at the scan there you go service info OSS Unix
so there it is it's running Unix let's see if that matches correct that matches what is the
command we need to run in order to display the FTP client help menu so FTP minus h
that is correct and let's see here let me clear this up in FTP manual H and there you go so this
is the help menu you can also do man so man FTP like that and then you get more information about
how to use FTP let's clear this up for you next one what is the username that is used
over FTP when you want to log in without having a an account so that one is easy Anonymous so let's
let's look in FTP and in here actually we're going to put Anonymous in the IP address there you go
don't worry about the password click enter be aware connected to the FTP so so this one here
should be anonymous perfect what is the Response Code we get for the FTP message login successful
okay so let's see this what do we get 230 anything in 200 means that is uh accepted so 230 submit
that answer there are a couple of commands we can use to list the files and directories available
on FTP server when it's there what is the other one and it's usually common to Linux and that'd
be LS right so if I type in LS you'll see that 226 is the what we got back and then we have the
flag in there let's do at last in here submit voila what is the command to download the file
so the thing here is that uh FTP does not work with cat so if I do cat let's say flag dot txt
it does not understand to be able to see the commands just type in a question mark in here
for example like that and then you'll see what you can do you can do CD you can do a lot of a lot of
other commands in here but cat is not one so the command is actually get so let's get the flag txt
there you go we got the flag as you can see here so the answer for this one is get all right one
last step so let's just submit the flag so let's uh quitting here so I'm just going to put exit
and clear this at last and you'll see that my flag is there so I'm just gonna do cat flag and
there is the flag all right so copy this paste it and submit the flag and that's it that's it
that's not for fun it's super easy guys if you have any questions any comments make sure you
reach out to my website dandoran.me cheers and I'll see you in the next Lab foreign