In this video we are going to hack into phone machine from the box, which is the second machine and
hack the box dial zero learning bot.
This machine is focused on exploiting FTP.
First of all, open the box dashboard.
Select Connect to the box and download the VPN credentials.
Save this.
Now open the folder where these credentials have saved in download folder.
We'll put the terminal in the same folder.
Then use the command sudo openvpn and the file name.
And you will be connected to the walks in connection.
But another terminal.
Will I have config command to check whether you are connected or not and you can see the tunnel zero
interface available.
Now go back to check the box website.
Ernst Born the Machine.
It may take a while to start.
Just copy the target machine IP.
And now let's just run an nmap scan against the machine.
I have used PT five and minimum rate 500 to speed up the process.
Dash B is verbose cab and dash.
Dash is going to check for all available ports on the machine and maps can take a while to complete.
And it is outputting the information as soon as it gets it.
For example, we can see that Port 21 is open on the machine, which is FTP port.
Now, while Nmap is conducting the scan, we can go back to the box website and try to answer some questions.
So the first question is what does the acronym FTP stand for?
Which is file transfer protocol.
To submit the answer.
So the next question is which board does the FTP service listen on?
Usually which is 21, which is also open on our machine.
No.
The third question is what is the skewed version of FPTP?
It is pure FPTP.
So the next question is which command is used to send an ICMP request to test the connection to a target?
Which is the pink command.
Let's just try to first do it, open another terminal and try to ping the IP address.
And you can see that we do have a connectivity to our machine.
So also it would be.
Click, submit answer.
You know, the next question is from your skills, which version the FTP is running on the target.
For this, we need our scan results and in the next question it is asking for OS type.
So let's go back to our scan.
Well, now our scan has completed.
So let's get the record information.
War machine is running vs ftp.
CD 3.0.3.
Just copy this information.
The answer.
Check the box question.
No, the next question was the OS type.
But we can see that it's Unix.
We copied and pasted.
Now the next question is what is the command we need to run in order to display the FTP client help,
which is FTP.
Edge.
No.
Let's just try to connect with our machine.
Lose the command FTP.
The IP address of the target machine.
Use the username Anonymous.
And give it a blank password.
And you can see that we are connected to our machine.
We can run different commands such as LZ.
Or directory.
And here we have the flag and flag.
Text file.
So let's just answer some check the box questions.
So the username is anonymous.
So the next question is what is the response code of the FTP login successful, which is 230.
Let's just answer it.
So the next question is what is the command used to list down all files, which is RLS the same command
that we use in our Linux?
Download our file, we use the command.
To use the command and download the flag file.
And you can see that our downloaded has started.
Not open the download folder.
Then open the blackboard.
Text file.
And here we have our flag.
Copy the flag.
Go back to check the box.
We used get commands downloaded.
No.
Made the root flag.
And the phone has been pawned.
I hope you like this video.
And see you in the next video.