Lame
This is my write-up for the machine Lame on Hack The Box located at: https://app.hackthebox.com/machines/Lame.
I am a beginner at penetration testing, so I will be referencing the Official Hack The Box Walk-through for this machine.
rustscan: rustscan -a 10.10.10.3
-e83fffbc701ef8841a0ba49b236a26e0.png)
I saw that port 21 was open. I was able to login to the anonymous user:
(1)-2031655f28125255185f966a87377003.png)
There was nothing in the folder. My guess is that I will have to upload a reverse shell on the system and then trigger it in order to get a connection to the system. I then ran enum4linux -a 10.10.10.3, which showed me this:
(1)-2dfbebdb302a0fc2fe9929d026f54afe.png)
Running smbclient -L <IP_ADDRESS> shows the same information:
(1)-f758deb3634930d59a5c34faaf48147a.png)
Looking in the tmp directory did not give anything useful:
-f9da663ea0601d581fc0a874cd202afa.png)
From playing around in the SMB system, I noticed that I have access to the tmp and IPC$ user. Neither of those had gotten me information that I can work off of. I looked at the write-up to see what I missed. There was a exploit on Metasploit that got you root:
-74dd7e209028124d2d62f459620720f9.png)
Now I have to look for the flags:
-40327e59db6cd14d62520ab825217dbe.png)