> For the complete documentation index, see [llms.txt](https://cybersec.th4ntis.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cybersec.th4ntis.com/hackthebox/walkthroughs/lame.md).

# Lame

## Initial Scan

```nmap
sudo nmap -T4 -v 10.129.111.164 -oA Lame
sudo nmap -T4 -p 21,22,139,445 -sV -v 10.129.111.164 -oA Lame
```

<figure><img src="/files/bBPEzImv99dYmG4WtU18" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/RfRtKEablFcitqQt22xc" alt=""><figcaption></figcaption></figure>

## FTP

Anonymous Login is enabled

<figure><img src="/files/lrdg8WMhy822RbErKeaE" alt=""><figcaption></figcaption></figure>

## SMB

<figure><img src="/files/AeC02OeBVGOorHQPPZo8" alt=""><figcaption></figcaption></figure>

&#x20;Only have access to tmp

&#x20;&#x20;

<figure><img src="/files/tsajYxLNt2s4hl39dN2u" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/9pbE7Y2DtDCpCoUjEXtS" alt=""><figcaption></figcaption></figure>

## MSFconsole

<figure><img src="/files/BUwrFKn4gkq3GUf8O5C8" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/qakTrpH2kAxp4UvDO7Yi" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/7MKWBcz03A5N4cxqpKXh" alt=""><figcaption></figcaption></figure>

So it's not Vuln to MS17-010(EternalBlue). Check for SMB Version Vulnerabilities

<figure><img src="/files/sHGXlwKC2dfeoASMPEwS" alt=""><figcaption></figcaption></figure>

[Rapid7 Document](https://www.rapid7.com/db/modules/exploit/multi/samba/usermap_script/)

<figure><img src="/files/7cnFzy9GnXn0Ob7vJlee" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/qXTL8UFtdWPM5p2PMBwD" alt=""><figcaption></figcaption></figure>

User Flag: a6a83ea02ff14ca4aa497dad8c2f775

<figure><img src="/files/c4z6wWNSvZ432MuiHlrt" alt=""><figcaption></figcaption></figure>

Root Flag: 162680cf1f47cde0affaecd104a59588

&#x20;

<figure><img src="/files/YQDxkU9Sv1CKjwO7WzfE" alt=""><figcaption></figcaption></figure>