Summary

  • The file descrption of the output of nmap shows information about the hosted services and various directories and files.
  • More specifically the line | ftp-anon: Anonymous FTP login allowed (FTP code 230) invokes that ftp is allowed, which alerts that we can log in anonymously to the machine and that might give us a foothold to explore further and gain more privileges.
  • Based on the outputs of the command, there are a lot of directories among them /bin, /boot, /dev, /etc, /home, /lib, /lib64, /lost+found etc. which may contain further information or services to probe for further enumeration.

Hence, following the path of least resistance, it is apt to use FTP to log in and explore the hosted services further.

By Dfaults

Original Article