└─# nmap --min-rate=10000 -p- worldwap.thm Starting Nmap 7.93 ( https://nmap.org ) at 2024-06-04 08:31 UTC Nmap scan report for worldwap.thm (10.10.174.96) Host is up (0.0086s latency). Not shown: 65532 closed tcp ports (reset) PORT STATE SERVICE 22/tcp open ssh 80/tcp open http 8081/tcp open blackice-icecap MAC Address: 02:A6:09:94:BB:73 (Unknown)
Nmap done: 1 IP address (1 host up) scanned in 3.43 seconds
└─# nmap -sT -sV -sC -O -p22,80,8081 worldwap.thm Starting Nmap 7.93 ( https://nmap.org ) at 2024-06-04 08:32 UTC Nmap scan report for worldwap.thm (10.10.174.96) Host is up (0.00043s latency).
PORT STATE SERVICE VERSION 22/tcp open ssh OpenSSH 8.2p1 Ubuntu 4ubuntu0.3 (Ubuntu Linux; protocol 2.0) | ssh-hostkey: | 3072 e35ef635600d88cc9f808ec8518eb0bf (RSA) | 256 eab85205644099b134426cc3f7ce7f1e (ECDSA) |_ 256 ee6afc284d3c5c619d313482ecfa1316 (ED25519) 80/tcp open http Apache httpd 2.4.41 ((Ubuntu)) | http-cookie-flags: | /: | PHPSESSID: |_ httponly flag not set | http-title: Welcome |_Requested resource was /public/html/ |_http-server-header: Apache/2.4.41 (Ubuntu) 8081/tcp open http Apache httpd 2.4.41 ((Ubuntu)) |_http-title: Site doesn't have a title (text/html; charset=UTF-8). |_http-server-header: Apache/2.4.41 (Ubuntu) MAC Address: 02:A6:09:94:BB:73 (Unknown) Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Aggressive OS guesses: Linux 3.10 - 3.13 (95%), Linux 3.8 (95%), Linux 3.1 (95%), Linux 3.2 (95%), AXIS 210A or 211 Network Camera (Linux 2.6.17) (94%), ASUS RT-N56U WAP (Linux 3.4) (93%), Linux 3.16 (93%), Linux 2.6.32 (92%), Linux 3.1 - 3.2 (92%), Linux 3.11 (92%) No exact OS matches for host (test conditions non-ideal). Network Distance: 1 hop Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 10.70 seconds
└─# nmap --script=vuln -p22,80,8081 worldwap.thm Starting Nmap 7.93 ( https://nmap.org ) at 2024-06-04 08:33 UTC Nmap scan report for worldwap.thm (10.10.174.96) Host is up (0.00028s latency).
PORT STATE SERVICE 22/tcp open ssh 80/tcp open http |_http-vuln-cve2017-1001000: ERROR: Script execution failed (use -d to debug) | http-cookie-flags: | /: | PHPSESSID: |_ httponly flag not set |_http-csrf: Couldn't find any CSRF vulnerabilities. | http-enum: | /phpmyadmin/: phpMyAdmin | /api/: Potentially interesting folder |_ /public/: Potentially interesting directory w/ listing on 'apache/2.4.41 (ubuntu)' |_http-stored-xss: Couldn't find any stored XSS vulnerabilities. |_http-dombased-xss: Couldn't find any DOM based XSS. 8081/tcp open blackice-icecap MAC Address: 02:A6:09:94:BB:73 (Unknown)
Nmap done: 1 IP address (1 host up) scanned in 31.15 seconds
