HTB - Synced

HTB - Synced

OS: Linux Difficulty: Very Easy 操作系统：Linux 难度：非常简单

After nmap enumeration, we will find: 经过 nmap 枚举扫描，我们将发现：

PORT    STATE SERVICE VERSION
873/tcp open  rsync   (protocol version 31)

rsync is a tool for copying and synchronizing files between machines. We can make use of rsync command to get access to files within the exposed share/module. rsync 是一款用于在机器之间复制和同步文件的工具。我们可以利用 rsync 命令来访问暴露的共享目录或模块中的文件。

In this machine, there is a flag.txt within the module called public. For command syntax and options available for rsync can be found in rsync —help. 在这台机器上，名为 public 的模块中存在一个 flag.txt 文件。关于 rsync 的命令语法和可用选项，可以通过 rsync —help 查看。

What I did was to download the flag.txt on my own kali machine via: rsync -a -v rsync://10.129.160.164:873/public/flag.txt ./ and read the flag. 我的操作是通过以下命令将 flag.txt 下载到我自己的 Kali 机器上：rsync -a -v rsync://10.129.160.164:873/public/flag.txt ./，然后读取 flag。

I got to learn that port 873 is commonly associated with the rsync service, and if an rsync share allows anonymous access, we may be able to enumerate and access files stored on the target server. 我了解到 873 端口通常与 rsync 服务相关联；如果 rsync 共享允许匿名访问，我们就有可能枚举并访问存储在目标服务器上的文件。