# Lab - Easy

## Now Let’s Begin 🚀 <a href="#df44" id="df44"></a>

## Lab - Easy

Let's start with the initial lab, the easy one. We'll commence by conducting reconnaissance.

### Recon

Now let's do some information gathering, we need to find out which ports are open. In order to do this, we need to use nmap.

<figure><img src="/files/BcLdYtFeTIPi0b0Cm4Um" alt=""><figcaption><p>nmap scan</p></figcaption></figure>

Following the nmap scan, we have identified four open ports. Now, let's proceed to investigate and interact with each of them.

We possess login information obtained from the lab description 'ceil:qwer1234'. I attempted to access via SSH, yet encountered an authentication failure. Let's attempt to utilize these login details to gain access through the FTP servers on ports 21 and 2121.

<figure><img src="/files/nmUXuJSXKeHB5i7PNCNx" alt=""><figcaption></figcaption></figure>

Port 21 was empty, therefore, let's attempt to connect to the FTP service on port 2121.

<figure><img src="/files/6y8aNkejfM6mUeFUn9VC" alt=""><figcaption><p>get the private key</p></figcaption></figure>

I have located the private key belonging to the user named 'ceil'. Let us now attempt to establish an SSH connection using this file.

<figure><img src="/files/lCIpK0AzXb4Y7BkMQcG5" alt=""><figcaption></figcaption></figure>

Begin by adjusting the file's permissions to 600. Subsequently, attempt to establish an SSH connection. Upon success, we will have gained access.

Now, let's obtain the flag to successfully complete the lab.

<figure><img src="/files/w6fl9OoRBuiCoNlqpcs6" alt=""><figcaption></figcaption></figure>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://faresbltagy.gitbook.io/footprintinglabs/footprinting-labs/lab-easy.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
