Hepet_PH_105

PH

---

Nmap discovered a PH(CCSO name-server) server on the target port 105 The running service is Mercury/32 PH addressbook server

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/hepet]
└─$ telnet $IP 105
Trying 192.168.159.140...
Connected to 192.168.159.140.
Escape character is '^]'.
HELP 
-200:1: Mercury Simple PH Server v4.62
-200:1: Copyright 1999-2008, David Harris, all rights reserved.
-200:1: 
-200:1: This PH server supports the following commands
-200:1: FIELDS  HELP  QUERY  QUIT  SITEINFO  STATUS
-200:1: 
-200:1: "[fieldname]=" queries are supported
-200:1: "return" clauses are supported in queries
-200:1: wildcard searches are not supported
200:OK.

HELP command reveals that it’s Mercury Simple PH Server v4.62 Additionally, the server supports the following commands;

• FIELDS
• HELP
• QUERY
• QUIT
• SITEINFO
• STATUS

SITEINFO
-200:1:version:0.9
-200:4:mailbox:email
200:Ready
 
STATUS
100:Mercury Simple PH Server v0.9
200:Ready
 
FIELDS  
-200:1:name:max 40 public lookup unique indexed default
-200:1:name:Familiar name
-200:2:department:max 40 public lookup default
-200:2:department:User's department or company
-200:3:address:max 60 public lookup default
-200:3:address:Street or delivery address
-200:4:postal:max 60 public lookup default
-200:4:postal:Postal address
-200:5:phone:max 24 public lookup default
-200:5:phone:Contact telephone number
-200:6:fax:max 24 public lookup default
-200:6:fax:Contact facsimile number
-200:7:email:max 100 public lookup default
-200:7:email:Electronic mail address
-200:8:other:max 80 public lookup default
-200:8:other:Other related information
200:OK

Checking the STATUS command also reveals Mercury Simple PH Server v0.9

QUERY account
508:No matches for your query.
QUERY user
508:No matches for your query.
QUERY admin
508:No matches for your query.
QUERY address
508:No matches for your query.

N/A