Editorial_Recon

RustScan

---

┌──(kali㉿kali)-[~/archive/htb/labs/editorial]
└─$ rustscan -a $IP
________________________________________
: https://discord.gg/GFrQsGy           :
: https://github.com/RustScan/RustScan :
 --------------------------------------
Please contribute more quotes to our GitHub https://github.com/rustscan/rustscan
 
[~] The config file is expected to be at "/home/kali/.rustscan.toml"
[~] Automatically increasing ulimit value to 5000.
[!] File limit is lower than default batch size. Consider upping with --ulimit. May cause harm to sensitive servers
Open 10.10.11.20:22
Open 10.10.11.20:80

Nmap

---

┌──(kali㉿kali)-[~/archive/htb/labs/editorial]
└─$ nmap -Pn -p- $IP
Starting Nmap 7.94SVN ( https://nmap.org ) at 2024-06-18 14:15 CEST
Nmap scan report for 10.10.11.20
Host is up (0.023s latency).
Not shown: 65533 closed tcp ports (conn-refused)
PORT   STATE SERVICE
22/tcp open  ssh
80/tcp open  http
 
Nmap done: 1 IP address (1 host up) scanned in 12.89 seconds

┌──(kali㉿kali)-[~/archive/htb/labs/editorial]
└─$ nmap -Pn -sC -sV -p22,80 $IP
Starting Nmap 7.94SVN ( https://nmap.org ) at 2024-06-18 14:15 CEST
Nmap scan report for 10.10.11.20
Host is up (0.019s latency).
 
PORT   STATE SERVICE VERSION
22/tcp open  ssh     OpenSSH 8.9p1 Ubuntu 3ubuntu0.7 (Ubuntu Linux; protocol 2.0)
| ssh-hostkey: 
|   256 0d:ed:b2:9c:e2:53:fb:d4:c8:c1:19:6e:75:80:d8:64 (ECDSA)
|_  256 0f:b9:a7:51:0e:00:d5:7b:5b:7c:5f:bf:2b:ed:53:a0 (ED25519)
80/tcp open  http    nginx 1.18.0 (Ubuntu)
|_http-server-header: nginx/1.18.0 (Ubuntu)
|_http-title: Did not follow redirect to http://editorial.htb
Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel
 
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 7.76 seconds

The target system appears to be Ubuntu

The target port 80 responded with 301 to a domain; editorial.htb The domain information has been appended to the /etc/hosts file on Kali

UDP

---

┌──(kali㉿kali)-[~/archive/htb/labs/editorial]
└─$ sudo nmap -Pn -sU --top-port 100 $IP 
Starting Nmap 7.94SVN ( https://nmap.org ) at 2024-06-18 14:16 CEST
 
Nmap scan report for 10.10.11.20
Host is up (0.022s latency).
Not shown: 99 closed udp ports (port-unreach)
PORT   STATE         SERVICE
68/udp open|filtered dhcpc
 
Nmap done: 1 IP address (1 host up) scanned in 109.77 seconds