RustScan
┌──(kali㉿kali)-[~/archive/htb/labs/irked]
└─$ rustscan -a $IP -b 20000
The Modern Day Port Scanner.
________________________________________
: https://discord.gg/GFrQsGy :
: https://github.com/RustScan/RustScan :
--------------------------------------
🌍HACK THE PLANET🌍
[~] The config file is expected to be at "/home/kali/.rustscan.toml"
[~] Automatically increasing ulimit value to 5000.
[!] File limit is lower than default batch size. Consider upping with --ulimit. May cause harm to sensitive servers
open 10.10.10.117:22
open 10.10.10.117:80
open 10.10.10.117:111
open 10.10.10.117:6697
open 10.10.10.117:8067
open 10.10.10.117:35222
open 10.10.10.117:65534
Nmap
┌──(kali㉿kali)-[~/archive/htb/labs/irked]
└─$ nmap -Pn -sC -sV -p22,80,111,6697,8067,35222,65534 $IP
Starting Nmap 7.93 ( https://nmap.org ) at 2023-01-24 18:48 CET
Nmap scan report for 10.10.10.117
Host is up (0.031s latency).
PORT STATE SERVICE VERSION
22/tcp open ssh OpenSSH 6.7p1 Debian 5+deb8u4 (protocol 2.0)
| ssh-hostkey:
| 1024 6a5df5bdcf8378b675319bdc79c5fdad (DSA)
| 2048 752e66bfb93cccf77e848a8bf0810233 (RSA)
| 256 c8a3a25e349ac49b9053f750bfea253b (ECDSA)
|_ 256 8d1b43c7d01a4c05cf82edc10163a20c (ED25519)
80/tcp open http Apache httpd 2.4.10 ((Debian))
|_http-server-header: Apache/2.4.10 (Debian)
|_http-title: Site doesn't have a title (text/html).
111/tcp open rpcbind 2-4 (RPC #100000)
| rpcinfo:
| program version port/proto service
| 100000 2,3,4 111/tcp rpcbind
| 100000 2,3,4 111/udp rpcbind
| 100000 3,4 111/tcp6 rpcbind
| 100000 3,4 111/udp6 rpcbind
| 100024 1 35222/tcp status
| 100024 1 38822/udp6 status
| 100024 1 48334/tcp6 status
|_ 100024 1 55524/udp status
6697/tcp open irc UnrealIRCd (Admin email djmardov@irked.htb)
8067/tcp open irc UnrealIRCd (Admin email djmardov@irked.htb)
35222/tcp open status 1 (RPC #100024)
65534/tcp open irc UnrealIRCd (Admin email djmardov@irked.htb)
Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 19.10 seconds
The target system is Debian