I found 2 services open, ftp and http.
The anonymous user is enabled, so, I log in the ftp server.
ftp -p 10.129.32.188 21
Inside the ftp server, I found 2 files.
These files are cordlists of users and passwords.
The main http page doesn't have anything interesting.
Using ffuf I found a login page.
ffuf -y /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -r .php -u http://10.129.32.188/FUZZ
login.php
Here I found a login form.
Using the credentials obtained in the ftp server, I'm able to log ass admin and obtain the flag.
