Mango_Recon

RustScan

---

┌──(kali㉿kali)-[~/archive/htb/labs/mango]
└─$ rustscan -a $IP -b 25000
________________________________________
: https://discord.gg/GFrQsGy           :
: https://github.com/RustScan/RustScan :
 --------------------------------------
Nmap? More like slowmap.🐢
 
[~] The config file is expected to be at "/home/kali/.rustscan.toml"
[~] Automatically increasing ulimit value to 5000.
[!] File limit is lower than default batch size. Consider upping with --ulimit. May cause harm to sensitive servers
open 10.10.10.162:22
open 10.10.10.162:80
open 10.10.10.162:443

Nmap

---

┌──(kali㉿kali)-[~/archive/htb/labs/mango]
└─$ nmap -sC -sV -p22,80,443 $IP                   
Starting Nmap 7.94 ( https://nmap.org ) at 2023-09-28 15:47 CEST
Nmap scan report for 10.10.10.162
Host is up (0.24s latency).
 
PORT    STATE SERVICE  VERSION
22/tcp  open  ssh      OpenSSH 7.6p1 Ubuntu 4ubuntu0.3 (Ubuntu Linux; protocol 2.0)
| ssh-hostkey: 
|   2048 a8:8f:d9:6f:a6:e4:ee:56:e3:ef:54:54:6d:56:0c:f5 (RSA)
|   256 6a:1c:ba:89:1e:b0:57:2f:fe:63:e1:61:72:89:b4:cf (ECDSA)
|_  256 90:70:fb:6f:38:ae:dc:3b:0b:31:68:64:b0:4e:7d:c9 (ED25519)
80/tcp  open  http     Apache httpd 2.4.29
|_http-title: 403 Forbidden
|_http-server-header: Apache/2.4.29 (Ubuntu)
443/tcp open  ssl/http Apache httpd 2.4.29 ((Ubuntu))
|_http-server-header: Apache/2.4.29 (Ubuntu)
| ssl-cert: Subject: commonName=staging-order.mango.htb/organizationName=Mango Prv Ltd./stateOrProvinceName=None/countryName=IN
| Not valid before: 2019-09-27T14:21:19
|_Not valid after:  2020-09-26T14:21:19
|_ssl-date: TLS randomness does not represent time
| tls-alpn: 
|_  http/1.1
|_http-title: Mango | Search Base
Service Info: Host: 10.10.10.162; OS: Linux; CPE: cpe:/o:linux:linux_kernel
 
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 24.02 seconds

The target system appears to be Ubuntu The SSL certificate contains a domain information in the CN field; staging-order.mango.htb

The domain information has been appended to the /etc/hosts file on Kali for local DNS resolution

UDP

---

┌──(kali㉿kali)-[~/archive/htb/labs/mango]
└─$ sudo nmap -sU -top-ports 1000 $IP
starting nmap 7.94 ( https://nmap.org ) at 2023-09-28 15:30 CEST
Nmap scan report for 10.10.10.162
Host is up (0.23s latency).
not shown: 994 closed udp ports (port-unreach)
PORT      STATE         SERVICE
67/udp    open|filtered dhcps
19650/udp open|filtered unknown
20360/udp open|filtered unknown
21898/udp open|filtered unknown
32772/udp open|filtered sometimes-rpc8
58631/udp open|filtered unknown
 
nmap done: 1 IP address (1 host up) scanned in 999.75 seconds