## FTP (21) - proftpd: no version - resolves to ftp.int.inlanefreight.htb ## SSH (22) - looks like pubkey auht only ## DNS (53) - ISC BIND 9.16.1 - no exploits available - axfr: inlanefreight.htb internal.inlanefreight.htb ftp.internal.inlanefreight.htb ## Custom FTP (2121) - nmap -sC: proftpd server showing as ccproxy-ftp - nc -nv: shows iprop - info leak: "Ceil's FTP" - ftp> status >> version = tnftp 20230507 ## CREDS ceil:qwer1234