sudo nmap --min-rate 10000 -p- 192.168.56.129 Starting Nmap 7.94SVN ( https://nmap.org ) at 2024-02-25 04:10 UTC Nmap scan report for 192.168.56.129 Host is up (0.00043s latency). Not shown: 65526 closed tcp ports (reset) PORT STATE SERVICE 22/tcp open ssh 80/tcp open http 111/tcp open rpcbind 2049/tcp open nfs 3128/tcp open squid-http 36483/tcp open unknown 45041/tcp open unknown 51739/tcp open unknown 52757/tcp open unknown MAC Address: 08:00:27:77:E1:75 (Oracle VirtualBox virtual NIC)
Nmap done: 1 IP address (1 host up) scanned in 2.57 seconds
sudo nmap -sT -sV -sC -O -p22,80,111,2049,3128,36483,45041,51739,52757 192.168.56.129 Starting Nmap 7.94SVN ( https://nmap.org ) at 2024-02-25 04:11 UTC Nmap scan report for 192.168.56.129 Host is up (0.00027s latency).
PORT STATE SERVICE VERSION 22/tcp open ssh OpenSSH 7.9p1 Debian 10+deb10u2 (protocol 2.0) | ssh-hostkey: | 2048 f8:3b:7c:ca:c2:f6:5a:a6:0e:3f:f9:cf:1b:a9:dd:1e (RSA) | 256 04:31:5a:34:d4:9b:14:71:a0:0f:22:78:2d:f3:b6:f6 (ECDSA) |_ 256 4e:42:8e:69:b7:90:e8:27:68:df:68:8a:83:a7:87:9c (ED25519) 80/tcp open http Apache httpd 2.4.38 ((Debian)) |_http-title: Site doesn't have a title (text/html). |_http-server-header: Apache/2.4.38 (Debian) 111/tcp open rpcbind 2-4 (RPC #100000) | rpcinfo: | program version port/proto service | 100000 2,3,4 111/tcp rpcbind | 100000 2,3,4 111/udp rpcbind | 100000 3,4 111/tcp6 rpcbind | 100000 3,4 111/udp6 rpcbind | 100003 3 2049/udp nfs | 100003 3 2049/udp6 nfs | 100003 3,4 2049/tcp nfs | 100003 3,4 2049/tcp6 nfs | 100005 1,2,3 49091/udp6 mountd | 100005 1,2,3 50150/udp mountd | 100005 1,2,3 51563/tcp6 mountd | 100005 1,2,3 51739/tcp mountd | 100021 1,3,4 36483/tcp nlockmgr | 100021 1,3,4 43921/tcp6 nlockmgr | 100021 1,3,4 54610/udp nlockmgr | 100021 1,3,4 55575/udp6 nlockmgr | 100227 3 2049/tcp nfs_acl | 100227 3 2049/tcp6 nfs_acl | 100227 3 2049/udp nfs_acl |_ 100227 3 2049/udp6 nfs_acl 2049/tcp open nfs 3-4 (RPC #100003) 3128/tcp open http-proxy Squid http proxy 4.6 |_http-server-header: squid/4.6 |_http-title: ERROR: The requested URL could not be retrieved 36483/tcp open nlockmgr 1-4 (RPC #100021) 45041/tcp open mountd 1-3 (RPC #100005) 51739/tcp open mountd 1-3 (RPC #100005) 52757/tcp open mountd 1-3 (RPC #100005) MAC Address: 08:00:27:77:E1:75 (Oracle VirtualBox virtual NIC) Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: general purpose Running: Linux 4.X|5.X OS CPE: cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:5 OS details: Linux 4.15 - 5.8 Network Distance: 1 hop Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 13.10 seconds
sudo nmap --script=vuln -p22,80,111,2049,3128,36483,45041,51739,52757 192.168.56.129 Starting Nmap 7.94SVN ( https://nmap.org ) at 2024-02-25 04:13 UTC Pre-scan script results: | broadcast-avahi-dos: | Discovered hosts: | 224.0.0.251 | After NULL UDP avahi packet DoS (CVE-2011-1002). |_ Hosts are all up (not vulnerable). Nmap scan report for 192.168.56.129 Host is up (0.00018s latency).
PORT STATE SERVICE 22/tcp open ssh 80/tcp open http |_http-dombased-xss: Couldn't find any DOM based XSS. |_http-csrf: Couldn't find any CSRF vulnerabilities. |_http-stored-xss: Couldn't find any stored XSS vulnerabilities. | http-enum: | /company/: Potentially interesting folder | /docs/: Potentially interesting directory w/ listing on 'apache/2.4.38 (debian)' |_ /js/: Potentially interesting directory w/ listing on 'apache/2.4.38 (debian)' 111/tcp open rpcbind 2049/tcp open nfs 3128/tcp open squid-http 36483/tcp open unknown 45041/tcp open unknown 51739/tcp open unknown 52757/tcp open unknown MAC Address: 08:00:27:77:E1:75 (Oracle VirtualBox virtual NIC)
Nmap done: 1 IP address (1 host up) scanned in 55.01 seconds
Dec 12 16:56:24 test sshd[29558]: Failed password for viper from 192.168.1.109 port 7088 ssh2 Dec 12 16:56:29 test sshd[29558]: Failed password for viper from 192.168.1.109 port 7088 ssh2 Dec 12 16:56:32 test sshd[29558]: Failed password for viper from 192.168.1.109 port 7088 ssh2 Dec 12 16:56:34 test sshd[29558]: error: Received disconnect from 192.168.1.109 port 7088:13: Unable to authenticate [preauth] Dec 12 16:56:34 test sshd[29558]: Disconnected from authenticating user viper 192.168.1.109 port 7088 [preauth] Dec 12 16:56:34 test sshd[29558]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.168.1.109 user=viper Dec 12 16:56:43 test sshd[29560]: Invalid user ?V1p3r2020!? from 192.168.1.109 port 7090
