Hack The Box Fawn Machine: Mastering FTP Protocol & Vulnerability

In this guide, we will explore the Fawn machine on Hack The Box, focusing on the File Transfer Protocol (FTP) and how misconfigurations can lead to unauthorized access in a penetration testing environment.

HTB Fawn Starting Point

Figure 1: Introduction to the Fawn machine and FTP basics.

Fawn Starting Point: Essential Tasks

  • Task 1: What does FTP stand for? Answer: File Transfer Protocol
  • Task 2: Which port does FTP listen on? Answer: 21
  • Task 3: What secure extension of SSH replaces FTP? Answer: SFTP
  • Task 4: Command to test connection? Answer: ping
  • Task 5: FTP version? Answer: vsftpd 3.0.3
  • Task 6: Target OS type? Answer: Unix
  • Task 7: Command for help menu? Answer: ftp -?
  • Task 8: Username for no-account login? Answer: anonymous
  • Task 9: 'Login successful' response code? Answer: 230
  • Task 10: Command to list files? Answer: ls
  • Task 11: Command to download file? Answer: get

Understanding FTP Misconfigurations

FTP is a standard protocol for transferring files, but it lacks encryption by default, making it vulnerable to Man-in-the-Middle (MitM) attacks. A critical vulnerability occurs when the service is configured to allow anonymous login.

When administrators enable anonymous access without securing the contents, anyone can log in to the server, browse directories, and download sensitive files—including logs that could map out a network.

FTP Enumeration

Figure 2: Scanning the target and identifying the FTP service.

Step-by-Step Exploitation: How to Solve Fawn

  1. Enumeration: Verify connectivity with ping {TARGET_IP}, then scan the target to confirm FTP is running on port 21.
  2. Exploiting Anonymous Login: Access the service using the ftp {TARGET_IP} command. When prompted for a username, type anonymous and hit Enter (no password required).
  3. Navigating and Downloading: Once logged in (indicated by status code 230), use ls to view available files. Use the get flag.txt command to download the flag to your local machine.
Capturing the Flag

Figure 3: Retrieving the flag from the FTP server.

Disclaimer: This content is for educational purposes only. All techniques described are intended for use in authorized, isolated, and legal cybersecurity training environments like Hack The Box. The author does not condone or support the use of these techniques against any real-world systems without explicit permission.

Congratulations on mastering FTP security fundamentals!

Comments

Post a Comment

Popular posts from this blog

Image
Hack The Box Meow Machine: Beginner Ethical Hacking Guide Welcome to our comprehensive walkthrough of the Meow machine , the perfect starting point for your journey in ethical hacking and cybersecurity on the Hack The Box (HTB) platform. Figure 1: Setting up your environment for penetration testing. HTB Starting Point: Essential Tasks Task 1: What does VM stand for? Answer: Virtual Machine Task 2: What tool do we use for the command line? Answer: terminal Task 3: What service forms our VPN connection? Answer: openvpn Task 4: What tool tests network connectivity? Answer: ping Task 5: What is the standard tool for port scanning? Answer: nmap Task 6: What service runs on port 23/tcp? Answer: telnet Task 7: What username grants access with a blank password? Answer: root Understanding Network Vulnerabilities: Why Telnet is Insecure In this penetration testing scenario, we identified that port 23 was open, which...
Read more