THM: Get Bounty Hacker

Hi All

Today we are going to play i new box the bounty hacker from Tryhackme

I used to start my enumeration process with nmap :

I discovered three services :

Nice let's see if we can access FTP with anonymous account :

Some juicy information :

here's a username the second file contain some password so i will try bruteforce ssh service :

Great i will access the server and get user flag :

Now i have to find the root flag :

Mission achieved it was simple with GTOFBIN.

I hope that you enjoyed reading.

Kind regards

Abdel