CozyHosting_Recon

RustScan

---

┌──(kali㉿kali)-[~/archive/htb/labs/cozyhosting]
└─$ rustscan -a $IP -b 25000
________________________________________
: https://discord.gg/GFrQsGy           :
: https://github.com/RustScan/RustScan :
 --------------------------------------
please contribute more quotes to our github https://github.com/rustscan/rustscan
 
[~] The config file is expected to be at "/home/kali/.rustscan.toml"
[~] Automatically increasing ulimit value to 5000.
[!] File limit is lower than default batch size. Consider upping with --ulimit. May cause harm to sensitive servers
open 10.10.11.230:22
open 10.10.11.230:80

Nmap

---

┌──(kali㉿kali)-[~/archive/htb/labs/cozyhosting]
└─$ nmap -Pn -sC -sV -p22,80 $IP
Starting Nmap 7.94 ( https://nmap.org ) at 2023-09-09 20:31 CEST
Nmap scan report for 10.10.11.230
Host is up (0.027s latency).
 
PORT   STATE SERVICE VERSION
22/tcp open  ssh     OpenSSH 8.9p1 Ubuntu 3ubuntu0.3 (Ubuntu Linux; protocol 2.0)
| ssh-hostkey: 
|   256 43:56:bc:a7:f2:ec:46:dd:c1:0f:83:30:4c:2c:aa:a8 (ECDSA)
|_  256 6f:7a:6c:3f:a6:8d:e2:75:95:d4:7b:71:ac:4f:7e:42 (ED25519)
80/tcp open  http    nginx 1.18.0 (Ubuntu)
|_http-server-header: nginx/1.18.0 (Ubuntu)
|_http-title: Did not follow redirect to http://cozyhosting.htb
Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel
 
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 7.51 seconds

The target system appears to be Ubuntu Returned data from the port 80 points to a domain; cozyhosting.htb

The domain information has been appended to the /etc/hosts file on Kali for local DNS resolution