DEV Community

Jung
Jung

Posted on

HTB - Synced

OS: Linux
Difficulty: Very Easy

After nmap enumeration, we will find:

PORT    STATE SERVICE VERSION
873/tcp open  rsync   (protocol version 31)
Enter fullscreen mode Exit fullscreen mode

rsync is a tool for copying and synchronizing files between machines.

We can make use of rsync command to get access to files within the exposed share/module. In this machine, there is a flag.txt within the module called public

For command syntax and options available for rsync can be found in rsync --help

What I did was to download the flag.txt on my own kali machine via:
rsync -a -v rsync://10.129.160.164:873/public/flag.txt ./

and read the flag

I got to learn that port 873 is commonly associated with the rsync service, and if an rsync share allows anonymous access, we may be able to enumerate and access files stored on the target server.

Top comments (0)