해당 문제는 HTB에서 공개 가능한 문제로 블로그에 라이트업 공개가 허용된 문제이므로 포스팅 합니다.
Task1
What does the 3-letter acronym FTP stand for?
File Transfer Protocol
Task2
Which port does the FTP service listen on usually?
21
Task3
FTP sends data in the clear, without any encryption. What acronym is used for a later protocol designed to provide similar functionality to FTP but securely, as an extension of the SSH protocol?
SFTP
Task4
What is the command we can use to send an ICMP echo request to test our connection to the target?
ping
Task5
From your scans, what version is FTP running on the target?
1
nmap -sV -T4 10.129.1.14
vsftpd 3.0.3
Task6
From your scans, what OS type is running on the target?
Unix
Task7
What is the command we need to run in order to display the 'ftp' client help menu?
ftp -?
Task8
What is username that is used over FTP when you want to log in without having an account?
FTP 에는 익명 로그인이라는 기능이 존재함 별도의 계정 없이 로그인이 가능한 방식임
접속 시에 다음과 같이 보통 뜸
1
2
Name: anonymous
Password:
비밀번호는 보통 빈칸으로 두거나 이메일 주소를 입력함
물론 서버 관리자가 외부 사용자에게 파일을 공개하기 위해서 익명 접속을 허용한 상태여야 함
anonymous
Task9
What is the response code we get for the FTP message 'Login successful'?
230
Task10
There are a couple of commands we can use to list the files and directories available on the FTP server. One is dir. What is the other that is a common way to list files on a Linux system.
ls
Task11
What is the command used to download the file we found on the FTP server?
get
Task12
Submit the flag located on the FTP server.
1
ftp 10.129.1.14
anonymous / (빈칸) 으로 로그인 하고 dir 로 디렉터리에 있는 파일 확인하고 get flag.txt 하면 됨
035db21c881520061c53e0536e44f815