Welcome to the Assessment
You have been provided with access to a controlled environment containing a target system. Your objective is to perform reconnaissance and identify weaknesses in the exposed services.
Approach the environment like a real penetration test. Enumerate first, document your findings, and only then move toward exploitation.
Learning Objectives
- Perform basic network reconnaissance.
- Identify exposed services and their versions.
- Enumerate an FTP service.
- Identify potential attack paths.
Discover the Target
Begin by performing reconnaissance against the target. Identify the exposed TCP services and determine which ports are available.
Start with a basic Nmap scan and expand your enumeration based on the results.
Which TCP ports are exposed on the target?
Submit the flag discovered during this task.
Identify the FTP Service
One of the discovered services is running FTP. Perform service enumeration and identify useful information exposed by the server.
What FTP software and version is running on the target?
Does the FTP service allow anonymous access?
Investigate the Service
Continue enumerating the FTP service. Investigate the accessible resources and identify information that could be useful during the assessment.
Identify one interesting file discovered during enumeration.
Submit the flag discovered during enumeration.
Complete the Assessment
You have gathered enough information to complete the initial assessment. Submit the final flag to complete the laboratory.
Final Flag
Submit the final flag obtained from the target environment.