RustScan


┌──(kali㉿kali)-[~/archive/htb/labs/acute]
└─$ rustscan -a $IP -b 25000
________________________________________
: https://discord.gg/GFrQsGy           :
: https://github.com/RustScan/RustScan :
 --------------------------------------
0day was here
 
[~] The config file is expected to be at "/home/kali/.rustscan.toml"
[~] Automatically increasing ulimit value to 5000.
[!] File limit is lower than default batch size. Consider upping with --ulimit. May cause harm to sensitive servers
open 10.10.11.145:443

Nmap


┌──(kali㉿kali)-[~/archive/htb/labs/acute]
└─$ nmap -p- $IP
Starting Nmap 7.94 ( https://nmap.org ) at 2023-11-07 13:36 CET
Nmap scan report for 10.10.11.145
Host is up (0.30s latency).
Not shown: 65534 filtered tcp ports (no-response)
PORT    STATE SERVICE
443/tcp open  https
 
Nmap done: 1 IP address (1 host up) scanned in 543.60 seconds
 
 
┌──(kali㉿kali)-[~/archive/htb/labs/acute]
└─$ nmap -sC -sV -p443 $IP
Starting Nmap 7.94 ( https://nmap.org ) at 2023-11-07 13:46 CET
Nmap scan report for 10.10.11.145
Host is up (0.50s latency).
 
PORT    STATE SERVICE  VERSION
443/tcp open  ssl/http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
|_http-title: Not Found
|_ssl-date: 2023-11-07T05:00:25+00:00; -7h46m27s from scanner time.
| tls-alpn: 
|_  http/1.1
|_http-server-header: Microsoft-HTTPAPI/2.0
| ssl-cert: Subject: commonName=atsserver.acute.local
| Subject Alternative Name: DNS:atsserver.acute.local, DNS:atsserver
| Not valid before: 2022-01-06T06:34:58
|_Not valid after:  2030-01-04T06:34:58
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows
 
Host script results:
|_clock-skew: -7h46m27s
 
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 42.52 seconds

The target system is a Windows host It appears to be part of a domain; acute.local The FQDN of the web server or host is atsserver.acute.local

The /etc/hosts file on Kali has been updated accordingly

UDP


┌──(kali㉿kali)-[~/archive/htb/labs/acute]
└─$ sudo nmap -sU -top-ports 1000 $IP
[sudo] password for kali: 
starting nmap 7.94 ( https://nmap.org ) at 2023-11-07 13:36 CET
Nmap scan report for 10.10.11.145
Host is up (0.29s latency).
All 1000 scanned ports on 10.10.11.145 are in ignored states.
not shown: 1000 open|filtered udp ports (no-response)
 
nmap done: 1 IP address (1 host up) scanned in 3191.64 seconds