Recon
$ nmap -p- --min-rate=1000 -Pn -v 192.168.184.240
Starting Nmap 7.94SVN ( https://nmap.org ) at 2024-08-27 18:42 CDT
Initiating Parallel DNS resolution of 1 host. at 18:42
Completed Parallel DNS resolution of 1 host. at 18:42, 1.08s elapsed
Initiating Connect Scan at 18:42
Scanning 192.168.184.240 [65535 ports]
Discovered open port 80/tcp on 192.168.184.240
Discovered open port 139/tcp on 192.168.184.240
Discovered open port 445/tcp on 192.168.184.240
Discovered open port 22/tcp on 192.168.184.240
Discovered open port 8021/tcp on 192.168.184.240
Connect Scan Timing: About 23.09% done; ETC: 18:45 (0:01:43 remaining)
Connect Scan Timing: About 45.96% done; ETC: 18:45 (0:01:12 remaining)
Connect Scan Timing: About 68.99% done; ETC: 18:45 (0:00:41 remaining)
Discovered open port 3000/tcp on 192.168.184.240
Completed Connect Scan at 18:45, 123.41s elapsed (65535 total ports)
Nmap scan report for 192.168.184.240
Host is up (0.044s latency).
Not shown: 65529 filtered tcp ports (no-response)
PORT STATE SERVICE
22/tcp open ssh
80/tcp open http
139/tcp open netbios-ssn
445/tcp open microsoft-ds
3000/tcp open ppp
8021/tcp open ftp-proxy
Read data files from: /usr/bin/../share/nmap
Nmap done: 1 IP address (1 host up) scanned in 124.57 seconds
$ nmap -p 22,80,139,445,3000,8021 -sC -sV -Pn -v 192.168.184.240
Starting Nmap 7.94SVN ( https://nmap.org ) at 2024-08-27 18:45 CDT
NSE: Loaded 156 scripts for scanning.
NSE: Script Pre-scanning.
Initiating NSE at 18:45
Completed NSE at 18:45, 0.00s elapsed
Initiating NSE at 18:45
Completed NSE at 18:45, 0.00s elapsed
Initiating NSE at 18:45
Completed NSE at 18:45, 0.00s elapsed
Initiating Parallel DNS resolution of 1 host. at 18:45
Completed Parallel DNS resolution of 1 host. at 18:45, 0.02s elapsed
Initiating Connect Scan at 18:45
Scanning 192.168.184.240 [6 ports]
Discovered open port 80/tcp on 192.168.184.240
Discovered open port 22/tcp on 192.168.184.240
Discovered open port 139/tcp on 192.168.184.240
Discovered open port 445/tcp on 192.168.184.240
Discovered open port 8021/tcp on 192.168.184.240
Discovered open port 3000/tcp on 192.168.184.240
Completed Connect Scan at 18:45, 0.05s elapsed (6 total ports)
Initiating Service scan at 18:45
Scanning 6 services on 192.168.184.240
Completed Service scan at 18:45, 12.74s elapsed (6 services on 1 host)
NSE: Script scanning 192.168.184.240.
Initiating NSE at 18:45
Completed NSE at 18:46, 40.52s elapsed
Initiating NSE at 18:46
Completed NSE at 18:46, 0.19s elapsed
Initiating NSE at 18:46
Completed NSE at 18:46, 0.00s elapsed
Nmap scan report for 192.168.184.240
Host is up (0.045s latency).
PORT STATE SERVICE VERSION
22/tcp open ssh OpenSSH 7.9p1 Debian 10+deb10u2 (protocol 2.0)
| ssh-hostkey:
| 2048 74:ba:20:23:89:92:62:02:9f:e7:3d:3b:83:d4:d9:6c (RSA)
| 256 54:8f:79:55:5a:b0:3a:69:5a:d5:72:39:64:fd:07:4e (ECDSA)
|_ 256 7f:5d:10:27:62:ba:75:e9:bc:c8:4f:e2:72:87:d4:e2 (ED25519)
80/tcp open http Apache httpd 2.4.38
| http-methods:
|_ Supported Methods: HEAD GET POST OPTIONS
|_http-title: 403 Forbidden
|_http-server-header: Apache/2.4.38 (Debian)
139/tcp open netbios-ssn Samba smbd 3.X - 4.X (workgroup: WORKGROUP)
445/tcp open netbios-ssn Samba smbd 4.9.5-Debian (workgroup: WORKGROUP)
3000/tcp open http Thin httpd
|_http-server-header: thin
|_http-favicon: Unknown favicon MD5: 68089FD7828CD453456756FE6E7C4FD8
| http-methods:
|_ Supported Methods: GET HEAD
|_http-title: Cassandra Web
8021/tcp open freeswitch-event FreeSWITCH mod_event_socket
Service Info: Hosts: 127.0.0.1, CLUE; OS: Linux; CPE: cpe:/o:linux:linux_kernel
Host script results:
| smb2-security-mode:
| 3:1:1:
|_ Message signing enabled but not required
| smb-security-mode:
| account_used: guest
| authentication_level: user
| challenge_response: supported
|_ message_signing: disabled (dangerous, but default)
|_clock-skew: mean: 1h20m00s, deviation: 2h18m35s, median: 0s
| smb-os-discovery:
| OS: Windows 6.1 (Samba 4.9.5-Debian)
| Computer name: clue
| NetBIOS computer name: CLUE\x00
| Domain name: pg
| FQDN: clue.pg
|_ System time: 2024-08-27T19:45:54-04:00
| smb2-time:
| date: 2024-08-27T23:45:53
|_ start_date: N/A
NSE: Script Post-scanning.
Initiating NSE at 18:46
Completed NSE at 18:46, 0.00s elapsed
Initiating NSE at 18:46
Completed NSE at 18:46, 0.00s elapsed
Initiating NSE at 18:46
Completed NSE at 18:46, 0.00s elapsed
Read data files from: /usr/bin/../share/nmap
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 54.21 seconds
Last updated