https://MParnin.github.io/write-ups/hackthebox/ Recent content in HackTheBox on MP https://MParnin.github.io/%3Clink%20or%20path%20of%20image%20for%20opengraph,%20twitter-cards%3E https://MParnin.github.io/%3Clink%20or%20path%20of%20image%20for%20opengraph,%20twitter-cards%3E Hugo -- gohugo.io en-us Sun, 26 Feb 2023 11:44:16 -0500 https://MParnin.github.io/write-ups/hackthebox/htb_lame/ Sun, 05 Mar 2023 00:00:00 +0000 https://MParnin.github.io/write-ups/hackthebox/htb_lame/ Enumeration Started with an Nmap scan nmap -sC -sV -Pn -oA nmap/full 10.10.10.3 -sC Scan with default NSE scripts. Considered useful for discovery and safe. -sV Attempts to determine the version of the service running on port. -Pn Ping probes were being blocked. -oA nmap/full Outputs all format results to a file named full in the nmap directory. VSFTPD CVE-2011-2523 Starting with VSFTPD, I searched exploit-db for vsftpd 2.3.4 and found the following backdoor command execution exploits: https://www.