┌──(mikannse㉿kali)-[~/HTB/redcross] └─$ sudo nmap --min-rate=10000 -p- 10.10.10.113 Starting Nmap 7.94SVN ( https://nmap.org ) at 2024-09-10 19:36 CST Nmap scan report for 10.10.10.113 Host is up (0.073s latency). Not shown: 65532 filtered tcp ports (no-response) PORT STATE SERVICE 22/tcp open ssh 80/tcp open http 443/tcp open https
Nmap done: 1 IP address (1 host up) scanned in 13.48 seconds
┌──(mikannse㉿kali)-[~/HTB/redcross] └─$ sudo nmap -sT -sC -sV -O -p22,80,443 10.10.10.113 Starting Nmap 7.94SVN ( https://nmap.org ) at 2024-09-10 19:37 CST Nmap scan report for 10.10.10.113 Host is up (0.071s latency).
PORT STATE SERVICE VERSION 22/tcp open ssh OpenSSH 7.9p1 Debian 10+deb10u3 (protocol 2.0) | ssh-hostkey: | 2048 67:d3:85:f8:ee:b8:06:23:59:d7:75:8e:a2:37:d0:a6 (RSA) | 256 89:b4:65:27:1f:93:72:1a:bc:e3:22:70:90:db:35:96 (ECDSA) |_ 256 66:bd:a1:1c:32:74:32:e2:e6:64:e8:a5:25:1b:4d:67 (ED25519) 80/tcp open http Apache httpd 2.4.38 |_http-server-header: Apache/2.4.38 (Debian) |_http-title: Did not follow redirect to https://intra.redcross.htb/ 443/tcp open ssl/http Apache httpd 2.4.38 |_ssl-date: TLS randomness does not represent time |_http-title: Did not follow redirect to https://intra.redcross.htb/ |_http-server-header: Apache/2.4.38 (Debian) | ssl-cert: Subject: commonName=intra.redcross.htb/organizationName=Red Cross International/stateOrProvinceName=NY/countryName=US | Not valid before: 2018-06-03T19:46:58 |_Not valid after: 2021-02-27T19:46:58 | tls-alpn: |_ http/1.1 Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: general purpose Running (JUST GUESSING): Linux 5.X|4.X|2.6.X (97%) OS CPE: cpe:/o:linux:linux_kernel:5.0 cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:2.6.32 Aggressive OS guesses: Linux 5.0 (97%), Linux 4.15 - 5.8 (90%), Linux 5.0 - 5.4 (90%), Linux 5.3 - 5.4 (89%), Linux 5.0 - 5.5 (88%), Linux 2.6.32 (87%) No exact OS matches for host (test conditions non-ideal). Service Info: Host: redcross.htb; OS: Linux; CPE: cpe:/o:linux:linux_kernel
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 23.70 seconds
┌──(mikannse㉿kali)-[~/HTB/redcross] └─$ sudo nmap --min-rate=10000 -p- 10.10.10.113 Starting Nmap 7.94SVN ( https://nmap.org ) at 2024-09-12 11:07 CST Nmap scan report for intra.redcross.htb (10.10.10.113) Host is up (0.065s latency). Not shown: 65529 closed tcp ports (reset) PORT STATE SERVICE 21/tcp open ftp 22/tcp open ssh 80/tcp open http 443/tcp open https 1025/tcp open NFS-or-IIS 5432/tcp open postgresql
Nmap done: 1 IP address (1 host up) scanned in 8.24 seconds
We trust you have received the usual lecture from the local System Administrator. It usually boils down to these three things:
#1) Respect the privacy of others. #2) Think before you type. #3) With great power comes great responsibility.
[sudo] password for r0ot: Matching Defaults entries for r0ot on redcross: env_reset, mail_badpass, secure_path=/usr/local/sbin\:/usr/local/bin\:/usr/sbin\:/usr/bin\:/sbin\:/bin
User r0ot may run the following commands on redcross: (ALL : ALL) ALL r0ot@redcross:~$ sudo su root@redcross:/home/r0ot# id uid=0(root) gid=0(root) groups=0(root)
