Gofer_Recon

RustScan

---

┌──(kali㉿kali)-[~/archive/htb/labs/gofer]
└─$ rustscan -a 10.10.11.225 -b 25000
________________________________________
: https://discord.gg/GFrQsGy           :
: https://github.com/RustScan/RustScan :
 --------------------------------------
0day was here ♥
 
[~] The config file is expected to be at "/home/kali/.rustscan.toml"
[~] Automatically increasing ulimit value to 5000.
[!] File limit is lower than default batch size. Consider upping with --ulimit. May cause harm to sensitive servers
open 10.10.11.225:22
open 10.10.11.225:80
open 10.10.11.225:139
open 10.10.11.225:445

Nmap

---

┌──(kali㉿kali)-[~/archive/htb/labs/gofer]
└─$ nmap -sC -sV -p22,80,139,445 $IP
Starting Nmap 7.94 ( https://nmap.org ) at 2023-07-31 16:11 CEST
Nmap scan report for 10.10.11.225
Host is up (0.086s latency).
 
PORT    STATE SERVICE     VERSION
22/tcp  open  ssh         OpenSSH 8.4p1 Debian 5+deb11u1 (protocol 2.0)
| ssh-hostkey: 
|   3072 aa:25:82:6e:b8:04:b6:a9:a9:5e:1a:91:f0:94:51:dd (RSA)
|   256 18:21:ba:a7:dc:e4:4f:60:d7:81:03:9a:5d:c2:e5:96 (ECDSA)
|_  256 a4:2d:0d:45:13:2a:9e:7f:86:7a:f6:f7:78:bc:42:d9 (ED25519)
80/tcp  open  http        Apache httpd 2.4.56
|_http-title: Did not follow redirect to http://gofer.htb/
|_http-server-header: Apache/2.4.56 (Debian)
139/tcp open  netbios-ssn Samba smbd 4.6.2
445/tcp open  netbios-ssn Samba smbd 4.6.2
Service Info: Host: gofer.htb; OS: Linux; CPE: cpe:/o:linux:linux_kernel
 
Host script results:
|_clock-skew: -3h31m47s
| smb2-time: 
|   date: 2023-07-31T10:40:18
|_  start_date: N/A
| smb2-security-mode: 
|   3:1:1: 
|_    Message signing enabled but not required
|_nbstat: NetBIOS name: GOFER, NetBIOS user: <unknown>, NetBIOS MAC: <unknown> (unknown)
 
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 22.61 seconds

The target system appears to be Debian

┌──(kali㉿kali)-[~/archive/htb/labs/gofer]
└─$ sudo nmap -sU -top-ports 1000 $IP
Starting Nmap 7.94 ( https://nmap.org ) at 2023-07-31 16:11 CEST
Nmap scan report for 10.10.11.225
Host is up (0.086s latency).
Not shown: 997 closed udp ports (port-unreach)
PORT    STATE         SERVICE
68/udp  open|filtered dhcpc
137/udp open          netbios-ns
138/udp open|filtered netbios-dgm
 
Nmap done: 1 IP address (1 host up) scanned in 912.35 seconds