Fawn - Linux

• Ping {target Ip} Verify connection, wait for 4 successful replies, Ctrl + C to cancel

  
  

• Sudo nmap -sV {target Ip} Port 21/tcp open ftp found (file transfer protocol)

  
  

• ftp -? To list what the service is capable of, we can connect using ftp {target Ip}

  
  

• username required, a typical misconfiguration for running ftp services is allowing an anonymous account to access the services like an authenticated user. Use “anonymous” as username and any password like “123” since it will be disregarded for the anonymous account.

  
  

• After successful login, the help command allows us to view commands we can use, we can also use man {command name} for more specific results.

  
  

• Ls shows us flag.txt, we next must run get flag.txt to download the flag.txt to our host (in this case our VM)

  
  

• Exit the ftp service with the bye command and cat flag.txt on our host machine to read the file and capture the flag.