FLAG77

FLAG78

Enumeration

PORT    STATE SERVICE VERSION
22/tcp  open  ssh     OpenSSH 8.2p1 Ubuntu 4 (Ubuntu Linux; protocol 2.0)
25/tcp  open  smtp    Postfix smtpd
|_smtp-commands: chocker.localhost, PIPELINING, SIZE 10240000, VRFY, ETRN, STARTTLS, ENHANCEDSTATUSCODES, 8BITMIME, DSN, SMTPUTF8, CHUNKING, 
80/tcp  open  http    Apache httpd 2.4.41 ((Ubuntu))
|_http-server-header: Apache/2.4.41 (Ubuntu)
|_http-title: Apache2 Ubuntu Default Page: It works
110/tcp open  pop3    Dovecot pop3d
|_pop3-capabilities: TOP PIPELINING RESP-CODES UIDL CAPA AUTH-RESP-CODE USER SASL(PLAIN LOGIN)
143/tcp open  imap    Dovecot imapd (Ubuntu)
|_imap-capabilities: more AUTH=LOGINA0001 LITERAL+ AUTH=PLAIN capabilities LOGIN-REFERRALS listed OK Pre-login have post-login ID IMAP4rev1 SASL-IR IDLE ENABLE
Service Info: Host:  chocker.localhost; OS: Linux; CPE: cpe:/o:linux:linux_kernel

Exploitation

Privilege Escalation