目录

连接至HTB服务器并启动靶机

1.What is the default port for rsync?

2.How many TCP ports are open on the remote host?

3.What is the protocol version used by rsync on the remote machine?

4.What is the most common command name on Linux to interact with rsync?

5.What credentials do you have to pass to rsync in order to use anonymous authentication? anonymous:anonymous, anonymous, None, rsync:rsync

6.What is the option to only list shares and files on rsync? (No need to include the leading -- characters)

ROOT_FLAG：72eaf5344ebb84908ae543a719830519

---

连接至HTB服务器并启动靶机

靶机IP：10.129.228.37

分配IP：10.10.16.12

---

1.What is the default port for rsync?

国产化后：rsync使用的默认端口是什么？

rsync 默认使用 873 端口

rsync 是一种快速、多功能的数据镜像和同步工具，可在本地和远程系统之间高效地复制文件和目录，支持增量备份、数据压缩等功能，广泛应用于数据备份、文件同步等场景。

---

2.How many TCP ports are open on the remote host?

使用nmap对靶机进行全端口TCP扫描：

nmap -p- --min-rate=1500 -sS {TARGET_IP}

从nmap扫描结果可见，靶机共开放1个端口，端口号873托管rsync服务

---

3.What is the protocol version used by rsync on the remote machine?

再次使用nmap对靶机873端口进行服务信息扫描：

nmap -p 873 -sV {TARGET_IP}

由nmap扫描结果可见，协议版本为：31

---

4.What is the most common command name on Linux to interact with rsync?

国产化后：在 Linux 系统中与 rsync 交互的最常见命令名称是什么？

最常用的就是rsync命令，可以通过man命令查看它的一些相关用法：

---

5.What credentials do you have to pass to rsync in order to use anonymous authentication? anonymous:anonymous, anonymous, None, rsync:rsync

国产化后：要通过 rsync 进行匿名登录需要哪些凭证名？anonymous:anonymous，None，rsync:rsync。

---

6.What is the option to only list shares and files on rsync? (No need to include the leading -- characters)

使用rsync列出靶机所有共享文件夹：

rsync --list-only {TARGET_IP}::

所用选项为：list-only

---

列出public文件夹中的所有文件：

rsync --list-only {TARGET_IP}::public

将public中的flag.txt文件下载到本地：

rsync {TARGET_IP}::public/flag.txt out.txt

ROOT_FLAG：72eaf5344ebb84908ae543a719830519