Katana — Proving Grounds (192.168.144.83)

Port Enumeration

$PORT     STATE SERVICE       VERSION
$21/tcp   open  ftp           vsftpd 3.0.3
$22/tcp   open  ssh           OpenSSH 7.9p1 Debian
$80/tcp   open  http          Apache 2.4.38 (Debian) - "Katana X"
$7080/tcp open  ssl/http      LiteSpeed (cert CN=katana, O=webadmin)
$8088/tcp open  http          LiteSpeed httpd - "Katana X"
$8715/tcp open  http          nginx 1.14.2 - HTTP Basic auth ("Restricted Content")

Multiple web front-ends serve the "Katana X" application (Apache on 80, LiteSpeed on 7080/8088), with an nginx site behind Basic auth on 8715 and an FTP service on 21. The multiple ports serving the same app (differing by which are writable/exploitable) plus FTP are the enumeration surface — a common path is uploading a webshell via FTP that is then served by one of the web roots.