Nmap op

PORT STATE SERVICE 22/tcp open ssh 110/tcp open pop3 143/tcp open imap 993/tcp open imaps 995/tcp open pop3s

scanning udp for snmp(as snmp only udp)

snmp burteforce community strings

then snmp walk

tom : NMds732Js2761

get ssh id from pop/imap

then ssh and go to mysql

get password in users table

cr3n4o7rzse7rzhnckhssncif7ds