Dev.to Security 🔐 Cybersecurity 👁 1

HTB - Synced

OS: Linux Difficulty: Very Easy After nmap enumeration, we will find: PORT STATE SERVICE VERSION 873/tcp open rsync (protocol version 31) rsync is a tool for copying and synchronizing files between machin

OS: Linux
Difficulty: Very Easy

After nmap enumeration, we will find:

PORT    STATE SERVICE VERSION
873/tcp open  rsync   (protocol version 31)

rsync is a tool for copying and synchronizing files between machines.

We can make use of rsync command to get access to files within the exposed share/module. In this machine, there is a flag.txt within the module called public

For command syntax and options available for rsync can be found in rsync --help

What I did was to download the flag.txt on my own kali machine via:
rsync -a -v rsync://10.129.160.164:873/public/flag.txt ./

and read the flag

I got to learn that port 873 is commonly associated with the rsync service, and if an rsync share allows anonymous access, we may be able to enumerate and access files stored on the target server.

📰 Read the original article on Dev.to Security

Originally published by Dev.to Security. Aggregated on AIWithGhost for educational purposes — full credit and traffic to the original publisher.