Fawn

Objective

Identify an exposed network service on the assigned training machine, evaluate its access controls, and retrieve the required proof through an authorized workflow.

Tools used

Methodology

1. Connected to Hack The Box: Established the OpenVPN tunnel and confirmed access to the assigned lab network.

2. Scanned the target: Ran an Nmap service-version scan from PowerShell.

nmap -sV TARGET_IP

3. Identified FTP: The scan revealed FTP listening on TCP port 21.

4. Tested access controls: Connected to the FTP service and tested the anonymous account permitted by the lab configuration.

ftp TARGET_IP
Username: anonymous

5. Enumerated available files: Listed the remote directory contents and identified the file containing the required proof.

dir
get FLAG_FILE

6. Retrieved and verified the proof: Downloaded the file locally and read it from the Windows environment. The proof value and target IP are intentionally omitted from this public write-up.

Skills demonstrated

Evidence and screenshots

Multiple screenshots were captured while solving Fawn, including the VPN connection, Nmap output, FTP login, directory listing, and file retrieval. The page structure is ready; the original screenshots still need to be uploaded into the repository before they can be displayed publicly.

Security takeaway

Anonymous FTP access can expose sensitive files to anyone who can reach the service. Organizations should disable anonymous authentication unless it is explicitly required, restrict network exposure, use secure transfer protocols, and regularly audit shared directories.

Lessons learned

This lab reinforced a repeatable sequence: connect, scan, identify, test, enumerate, retrieve, and document. The technical steps were simple, but the disciplined process is the real skill.