HTB

FTP service exposing anonymous login. Flag retrieved directly via unauthenticated FTP session.

Telnet service with no root password set. Direct unauthenticated access to root shell.