Enumeration
Last updated
Last updated
When I first ran the nmap scan i only discovered 2 ports - 2222 -ssh banana studio and port 5555 which was filtered. Which means I could not connect to it. So I widened the ths scan and found port 59777
I googled the port and found there was vulnerability on it. Specifically a script allowing me to read files.
I saved the script to a python file by typing "vi exploit.py" after copying it from the exploit db, then i used cat to see the script in the terminal and see what commands I could find. Which should me a few but i decided to start with "getDeviceInfo" as it could allow me to avoid any unnecessary commands.