FTP stuck

[Toyotaco06]

On a mission where i need to gather credentials, the target is the Admin.

nmap reveals open ftp.

FTP requires password, so i use ftpnuke to change root password with success. Replying with new root password does not complete mission because i can not leave any trace so i need to gain entry to delete tracks. How do i go about gaining entry if when i go to use ftp and enter the name and new password i created it tells me the user/password is incorrect?

I am new to these more in depth hacking games help is appreciated. I cant find anything on this that makes any sense.

[Grumbledore]

have you tryed root@password instead of username@password?

[Toyotaco06]

This worked to get me in. How come the terminal switches to red border and the ip address has the ip@____________. What does the word behind @ refer to?

[Grumbledore]

that referes to the machine name, if i am not mistaken. long time since i messed with linux

[Toyotaco06]

So now how do i go about going further? All i see is a Desktop Downloads and Config folder, Config folder only contains bank.txt which gives me a bank acct. password.

[Grumbledore]

use the help pages and get know with the basic commands.

u can use cd to navigate through the filesystem.

cd ..

for example is used to move up in the directory tree. for example:
it moves from

/home/Users

to

/home

you can move directly if you know the path like that:

/usr/bin

in your case i would try to move into the

/home/Users/SurnameOfTheAdmin/Config

folder and download his Mail.txt file then decipher it and mail the password.

logs are found in /var

in /var you can use

LogViewer.exe system.log

to view the system log

[Toyotaco06]

I have the basic understanding of the commands. But the information you have provided me is helping me figure it out. I am now getting somewhere. Thanks again for your help.

[Toyotaco06]

Ok, so I have retrieved the targets mail password, i am trying to alter the system.log through ftp, no dice. I thought id try social engineering by deciphering a different mail.txt but now when i use the get file command "get Mail.txt" it doesn't work, it just keeps telling me the example. Did something change on me? Is this a bug? Admin Monitor shows no one.

[Grumbledore]

maybe try scp -d Mail.txt

[Toyotaco06]

i am in ftp, i type get Mail.txt and it comes back:
Usage: get [file]
Example: get document.txt
I tried scp -d Mail.txt for the hell of it and came back command not found

[Grumbledore]

sorry was just a guess ^^ thought maybe it will work xD well then the command might be broken. try using the FileBrowser.exe to download it. not sure if that works in ftp. it does in smtp though

[SciionGaming]

ftp downloads only work in certain folders. Try opening the .txt and copying and pasting the contents into a notebook. Then save the file and decipher it.

[SciionGaming]

also to save typing cd .. a load of times just type cd / to get back to the root

[Toyotaco06]

so how do i go about opening this Mail.txt. I can't save it to m fileexplorer to decipher, and i can't open it to view it that i know of. cat doesn't work in ftp.

[SciionGaming]

ok silly question, what folder are you in when you try using the "get" command?

[Toyotaco06]

So i just typed in the full command, get /home/Users/Omfor/Config/Mail.txt and voila, it worked. The first time i used the get command i just put get Mail.txt in ftp and it worked. hmm