# Exploit

## Host:

```
192.168.190.93
```

## Nmap

```
PORT      STATE  SERVICE   REASON         VERSION
20/tcp    closed ftp-data  reset ttl 61
21/tcp    open   ftp       syn-ack ttl 61 vsftpd 3.0.2
| ftp-anon: Anonymous FTP login allowed (FTP code 230)
|_drwxrwxrwx    2 0        0               6 Apr 01  2020 pub [NSE: writeable]
| ftp-syst: 
|   STAT: 
| FTP server status:
|      Connected to 192.168.45.212
|      Logged in as ftp
|      TYPE: ASCII
|      No session bandwidth limit
|      Session timeout in seconds is 300
|      Control connection is plain text
|      Data connections will be plain text
|      At session startup, client count was 3
|      vsFTPd 3.0.2 - secure, fast, stable
|_End of status
22/tcp    open   ssh       syn-ack ttl 61 OpenSSH 7.4 (protocol 2.0)
53/tcp    closed domain    reset ttl 61
80/tcp    open   http      syn-ack ttl 61 Apache httpd 2.4.6 ((CentOS) PHP/7.3.22)
|_http-server-header: Apache/2.4.6 (CentOS) PHP/7.3.22
|_http-generator: HTMLy v2.7.5
| http-cookie-flags: 
|   /: 
|     PHPSESSID: 
|_      httponly flag not set
|_http-favicon: Unknown favicon MD5: A4DA8778FE902EB34FD9A5D4C0A832E1
| http-methods: 
|_  Supported Methods: GET POST
| http-robots.txt: 11 disallowed entries 
| /config/ /system/ /themes/ /vendor/ /cache/ 
| /changelog.txt /composer.json /composer.lock /composer.phar /search/ 
|_/admin/
|_http-title: Sybaris - Just another HTMLy blog
6379/tcp  open   redis     syn-ack ttl 61 Redis key-value store 5.0.9
10091/tcp closed unknown   reset ttl 61
10092/tcp closed unknown   reset ttl 61
10093/tcp closed unknown   reset ttl 61
10094/tcp closed unknown   reset ttl 61
10095/tcp closed unknown   reset ttl 61
10096/tcp closed unknown   reset ttl 61
10097/tcp closed unknown   reset ttl 61
10098/tcp closed unknown   reset ttl 61
10099/tcp closed unknown   reset ttl 61
10100/tcp closed itap-ddtp reset ttl 61
```

UDP?
