Switchboard FTP

🧩 OperationSwitchboard

A telecom startup left its FTP server wide open with anonymous login enabled. The anon share contains credentials.txt with SSH creds. Once in, a world-writable .bashrc and a root cron makes this escalation clean and quick. This box is your way IN: it's the only internet-facing host. From your foothold here, pivot (SSH tunnel / proxychains, or the in-browser Pwnbox) to the four internal hosts — sw-smtp, sw-redis, sw-rsync, sw-snmp — on the cluster network.