Knowledge Hub

Crocodile

Hack The Box10 answered prompts

Crocodile Hack The Box walkthrough with 10 answered prompts and lab methodology notes.

Prompts and answers

  • What nmap scanning switch employs the use of default scripts during a scan?
    -sC
  • What service version is found to be running on port 21?
    vsftpd 3.0.3
  • What FTP code is returned to us for the "Anonymous FTP login allowed" message?
    230
  • What command can we use to download the files we find on the FTP server?
    get
  • What is one of the higher-privilege sounding usernames in the list we retrieved?
    admin
  • What version of Apache HTTP Server is running on the target host?
    2.4.41
  • What is the name of a handy web site analysis plug-in we can install in our browser?
    Wappalyzer
  • What switch can we use with gobuster to specify we are looking for specific filetypes?
    -x
  • What file have we found that can provide us a foothold on the target?
    login.php
  • Submit root flag
    c7110277ac44d78b6a9fff2232434d16