Easy Linux box from HackTheBox.

On rustscan we found It has 3 ports open 21,22,80.

first tried to use filezilla to login ftp but couldn’t. I needed credentials to login ftp.

Let’s Enumerate webpage. I found it’s giving packets.

Let’s try to check data packet 0. using wireshark. we got credentials. user Nathan password Buck3tH4TF0RM3! We can ssh and ftp using these creds. on doing ssh we get #user-txt

For root priv let’s run linpeas.sh We found that python has capabillity to setuid as 0.

so run python3 -c 'import os; os.setuid(0);os.system("/bin/sh")'

and we get root shell and finally #root-txt