HTB REMOTE Initial Recon I started the initial recon using nmap : sudo nmap -sS -sV -sC 10.10.10.180 > rec_ini The following is the result I get: So, it has a web page which looks like an online shopping site. Also in the people section we find the names of some people which may letter help us gaining access. It seems that the FTP server has anonymous login enabled, so we can try doing anonymous login in the FTP server.