OS: Linux
Difficulty: Very Easy
After nmap enumeration, we will find:
PORT STATE SERVICE VERSION
873/tcp open rsync (protocol version 31)
rsync is a tool for copying and synchronizing files between machines.
We can make use of rsync command to get access to files within the exposed share/module. In this machine, there is a flag.txt within the module called public
For command syntax and options available for rsync can be found in rsync --help
What I did was to download the flag.txt on my own kali machine via:
rsync -a -v rsync://10.129.160.164:873/public/flag.txt ./
and read the flag
I got to learn that port 873 is commonly associated with the rsync service, and if an rsync share allows anonymous access, we may be able to enumerate and access files stored on the target server.
Top comments (0)