# Lame ## Initial Scan ```nmap sudo nmap -T4 -v 10.129.111.164 -oA Lame sudo nmap -T4 -p 21,22,139,445 -sV -v 10.129.111.164 -oA Lame ```

## FTP Anonymous Login is enabled

## SMB

Only have access to tmp

## MSFconsole

So it's not Vuln to MS17-010(EternalBlue). Check for SMB Version Vulnerabilities

[Rapid7 Document](https://www.rapid7.com/db/modules/exploit/multi/samba/usermap_script/)

User Flag: a6a83ea02ff14ca4aa497dad8c2f775

Root Flag: 162680cf1f47cde0affaecd104a59588

--- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://cybersec.th4ntis.com/hackthebox/walkthroughs/lame.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.