Atom_Recon

RustScan

---

┌──(kali㉿kali)-[~/archive/htb/labs/atom]
└─$ rustscan -a $IP -b 25000
________________________________________
: https://discord.gg/GFrQsGy           :
: https://github.com/RustScan/RustScan :
 --------------------------------------
Nmap? More like slowmap.🐢
 
[~] The config file is expected to be at "/home/kali/.rustscan.toml"
[~] Automatically increasing ulimit value to 5000.
[!] File limit is lower than default batch size. Consider upping with --ulimit. May cause harm to sensitive servers
open 10.10.10.237:80
open 10.10.10.237:135
open 10.10.10.237:445
open 10.10.10.237:443
open 10.10.10.237:5985
open 10.10.10.237:6379

Nmap

---

┌──(kali㉿kali)-[~/archive/htb/labs/atom]
└─$ nmap -p- $IP
Starting Nmap 7.94SVN ( https://nmap.org ) at 2024-01-09 03:28 CET
Stats: 0:00:29 elapsed; 0 hosts completed (1 up), 1 undergoing Connect Scan
Connect Scan Timing: About 19.91% done; ETC: 03:31 (0:02:01 remaining)
Nmap scan report for 10.10.10.237
Host is up (0.026s latency).
Not shown: 65529 filtered tcp ports (no-response)
PORT     STATE SERVICE
80/tcp   open  http
135/tcp  open  msrpc
443/tcp  open  https
445/tcp  open  microsoft-ds
5985/tcp open  wsman
6379/tcp open  redis
 
Nmap done: 1 IP address (1 host up) scanned in 103.83 seconds
 
┌──(kali㉿kali)-[~/archive/htb/labs/atom]
└─$ nmap -Pn -sC -sV -p80,135,443,445,5985,6379 $IP
Starting Nmap 7.94SVN ( https://nmap.org ) at 2024-01-09 03:29 CET
Nmap scan report for 10.10.10.237
Host is up (0.026s latency).
 
PORT     STATE SERVICE      VERSION
80/tcp   open  http         Apache httpd 2.4.46 ((Win64) OpenSSL/1.1.1j PHP/7.3.27)
|_http-title: Heed Solutions
| http-methods: 
|_  Potentially risky methods: TRACE
|_http-server-header: Apache/2.4.46 (Win64) OpenSSL/1.1.1j PHP/7.3.27
135/tcp  open  msrpc        Microsoft Windows RPC
443/tcp  open  ssl/http     Apache httpd 2.4.46 ((Win64) OpenSSL/1.1.1j PHP/7.3.27)
|_ssl-date: TLS randomness does not represent time
| ssl-cert: Subject: commonName=localhost
| Not valid before: 2009-11-10T23:48:47
|_Not valid after:  2019-11-08T23:48:47
|_http-title: Heed Solutions
|_http-server-header: Apache/2.4.46 (Win64) OpenSSL/1.1.1j PHP/7.3.27
| tls-alpn: 
|_  http/1.1
| http-methods: 
|_  Potentially risky methods: TRACE
445/tcp  open  microsoft-ds Windows 10 Pro 19042 microsoft-ds (workgroup: WORKGROUP)
5985/tcp open  http         Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
|_http-server-header: Microsoft-HTTPAPI/2.0
|_http-title: Not Found
6379/tcp open  redis        Redis key-value store
Service Info: Host: ATOM; OS: Windows; CPE: cpe:/o:microsoft:windows
 
Host script results:
|_clock-skew: mean: 2h39m57s, deviation: 4h37m08s, median: -2s
| smb-os-discovery: 
|   OS: Windows 10 Pro 19042 (Windows 10 Pro 6.3)
|   OS CPE: cpe:/o:microsoft:windows_10::-
|   Computer name: ATOM
|   NetBIOS computer name: ATOM\x00
|   Workgroup: WORKGROUP\x00
|_  System time: 2024-01-08T18:29:49-08:00
| smb2-security-mode: 
|   3:1:1: 
|_    Message signing enabled but not required
| smb-security-mode: 
|   account_used: guest
|   authentication_level: user
|   challenge_response: supported
|_  message_signing: disabled (dangerous, but default)
| smb2-time: 
|   date: 2024-01-09T02:29:51
|_  start_date: N/A
 
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 58.31 seconds

The target system appears to be a Windows 10 (19042) host The hostname of the target system is atom

UDP

---

┌──(kali㉿kali)-[~/archive/htb/labs/atom]
└─$ sudo nmap -sU -top-ports 1000 $IP
starting nmap 7.94svn ( https://nmap.org ) at 2024-01-09 03:23 CET
Nmap scan report for 10.10.10.237
Host is up (0.028s latency).
All 1000 scanned ports on 10.10.10.237 are in ignored states.
not shown: 1000 open|filtered udp ports (no-response)
 
nmap done: 1 IP address (1 host up) scanned in 29.81 seconds