1 recon

# added to /etc/hosts
10.10.10.197 sneakycorp.htb

PORT     STATE SERVICE  VERSION
21/tcp   open  ftp      vsftpd 3.0.3
22/tcp   open  ssh      OpenSSH 7.9p1 Debian 10+deb10u2 (protocol 2.0)
25/tcp   open  smtp     Postfix smtpd
|_smtp-commands: debian, PIPELINING, SIZE 10240000, VRFY, ETRN, STARTTLS, ENHANCEDSTATUSCODES, 8BITMIME, DSN, SMTPUTF8, CHUNKING,
80/tcp   open  http     nginx 1.14.2
|_http-server-header: nginx/1.14.2
|_http-title: Did not follow redirect to http://sneakycorp.htb
143/tcp  open  imap     Courier Imapd (released 2018)
|_imap-capabilities: STARTTLS QUOTA completed THREAD=ORDEREDSUBJECT THREAD=REFERENCES UIDPLUS ACL ACL2=UNION IDLE CHILDREN ENABLE SORT CAPABILITY IMAP4rev1 NAMESPACE OK UTF8=ACCEPTA0001
| ssl-cert: Subject: commonName=localhost/organizationName=Courier Mail Server/stateOrProvinceName=NY/countryName=US
| Subject Alternative Name: email:[e-mail]
993/tcp  open  ssl/imap Courier Imapd (released 2018)
|_imap-capabilities: AUTH=PLAIN completed THREAD=ORDEREDSUBJECT THREAD=REFERENCES UIDPLUS ACL ACL2=UNION IDLE CHILDREN SORT ENABLE CAPABILITY OK IMAP4rev1 NAMESPACE UTF8=ACCEPTA0001 QUOTA
| ssl-cert: Subject: commonName=localhost/organizationName=Courier Mail Server/stateOrProvinceName=NY/countryName=US
| Subject Alternative Name: email:[e-mail]
8080/tcp open  http     nginx 1.14.2
|_http-open-proxy: Proxy might be redirecting requests
|_http-server-header: nginx/1.14.2
|_http-title: Welcome to nginx!
Service Info: Host:  debian; OSs: Unix, Linux; CPE: cpe:/o:linux:linux_kernel