Recon

• Target : 192.168.2.103

simple network map scan:

nmap -sS -sV -T5 192.168.2.103

Notes:

• Open ports 21, 22, 80
• Versions : pyftpdlib 2.0.1 , OpenSSH 8.4p1, Apache httpd 2.4.62

As usual Since the port 80 is open, we started with a simple look on the browser:

The Sync config button takes us to the URL: http://192.168.2.113/?theme=pbasvt.gkg

The page gave us valuable information about the FTP server running such as the FTP using Default credential, and server contains a FTP log file (Could be our target file to find)

I also noticed the weird value of the parameter theme=pbasvt.gkg

Followed with the Manual Help button :