Escape_NTP

NTP

---

Nmap discovered a NTP server on the target UDP port 123 The running service is ntp

┌──(kali㉿kali)-[~/archive/htb/labs/escape]
└─$ sudo nmap -sU -sV --script "ntp* and (discovery or vuln) and not (dos or brute)" -p 123 $IP
[sudo] password for kali: 
starting nmap 7.94 ( https://nmap.org ) at 2023-08-12 17:48 CEST
Nmap scan report for sequel.htb (10.10.11.202)
Host is up (0.095s latency).
 
PORT    STATE SERVICE VERSION
123/udp open  ntp     NTP v3
| ntp-info: 
|_  receive time stamp: 2023-08-12T23:48:05
 
service detection performed. please report any incorrect results at https://nmap.org/submit/ .
nmap done: 1 IP address (1 host up) scanned in 10.67 seconds

the target ntp service is using the version 3

┌──(kali㉿kali)-[~/archive/htb/labs/escape]
└─$ ntpq -c readlist $IP
***Request timed out
 
┌──(kali㉿kali)-[~/archive/htb/labs/escape]
└─$ ntpq -c readvar $IP
***Request timed out
 
┌──(kali㉿kali)-[~/archive/htb/labs/escape]
└─$ ntpq -c peers $IP
***Request timed out
 
┌──(kali㉿kali)-[~/archive/htb/labs/escape]
└─$ ntpq -c associations $IP
***Request timed out

Nothing returned