Craft2_Recon

RustScan

---

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/craft2]
└─$ rustscan --no-banner --scripts none -a $IP
[~] Automatically increasing ulimit value to 10000.
Open 192.168.103.188:80
Open 192.168.103.188:135
Open 192.168.103.188:445
Open 192.168.103.188:49666
192.168.103.188 -> [80,135,445,49666]

Nmap

---

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/craft2]
└─$ nmap -Pn -p- -T5 --min-parallelism 100 --max-parallelism 100 $IP --open 
Starting Nmap 7.95 ( https://nmap.org ) at 2025-07-04 18:06 CEST
Nmap scan report for 192.168.103.188
Host is up (0.021s latency).
Not shown: 65531 filtered tcp ports (no-response)
Some closed ports may be reported as filtered due to --defeat-rst-ratelimit
PORT      STATE SERVICE
80/tcp    open  http
135/tcp   open  msrpc
445/tcp   open  microsoft-ds
49666/tcp open  unknown
 
Nmap done: 1 IP address (1 host up) scanned in 75.61 seconds
 
 
┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/craft2]
└─$ nmap -Pn -sC -sV -p80,135,445,49666 $IP                                 
Starting Nmap 7.95 ( https://nmap.org ) at 2025-07-04 18:07 CEST
Nmap scan report for 192.168.103.188
Host is up (0.020s latency).
 
PORT      STATE SERVICE       VERSION
80/tcp    open  http          Apache httpd 2.4.48 ((Win64) OpenSSL/1.1.1k PHP/8.0.7)
|_http-title: Craft
|_http-server-header: Apache/2.4.48 (Win64) OpenSSL/1.1.1k PHP/8.0.7
135/tcp   open  msrpc         Microsoft Windows RPC
445/tcp   open  microsoft-ds?
49666/tcp open  msrpc         Microsoft Windows RPC
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows
 
Host script results:
| smb2-time: 
|   date: 2025-07-04T16:08:40
|_  start_date: N/A
| smb2-security-mode: 
|   3:1:1: 
|_    Message signing enabled but not required
|_clock-skew: -3s
 
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 99.98 seconds

The target system is a Windows host.

UDP

---

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/craft2]
└─$ sudo nmap -Pn -sU -top-ports 1000 $IP
Starting Nmap 7.95 ( https://nmap.org ) at 2025-07-04 18:06 CEST
Nmap scan report for 192.168.103.188
Host is up.
All 1000 scanned ports on 192.168.103.188 are in ignored states.
Not shown: 1000 open|filtered udp ports (no-response)
 
Nmap done: 1 IP address (1 host up) scanned in 206.90 seconds