Hi, this is a write up for an interesting room from TryHackMe called ‘Hijack’. Hope you like this story. :)
First, use the port scan to the Target-IP, here I use rustscan -a command, here is the output.
There are three services are really interesting for the initial lookup. I first checked the ftp and I thought maybe it allows the anonymous login but it failed. Then look into the nfs. Use showmount -e to show any exist directory names.
After that, I create a local directory and mount the share folder to local.