🌊 nmap -sC: Scan with default NSE Scripts

room: bounty hacker

NSE stands for NMAP Scripting Engine. -sC scans the IP with default NSE Scripts. It's considered useful and safe. Specially, if you compare it to flags like -A that enables aggressive mode that's detectable. 

From the results here, we actually discover that FTP login is allowed and that the username is Anonymous. Nakita na natin and exploit. We can use this.