RustScan
┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/hunit]
└─$ rustscan -a $IP
________________________________________
: http://discord.skerritt.blog :
: https://github.com/RustScan/RustScan :
--------------------------------------
Open ports, closed hearts.
[~] The config file is expected to be at "/home/kali/.rustscan.toml"
[~] Automatically increasing ulimit value to 10000.
Open 192.168.185.125:8080
Open 192.168.185.125:12445
Open 192.168.185.125:18030
Open 192.168.185.125:43022
Nmap
┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/hunit]
└─$ nmap -p- -sC -sV -T5 --min-parallelism 100 --max-parallelism 256 $IP
Starting Nmap 7.95 ( https://nmap.org ) at 2025-03-30 20:10 CEST
Nmap scan report for 192.168.185.125
Host is up (0.028s latency).
Not shown: 65531 filtered tcp ports (no-response)
PORT STATE SERVICE VERSION
8080/tcp open http Apache Tomcat (language: en)
|_http-title: My Haikus
12445/tcp open netbios-ssn Samba smbd 4
18030/tcp open http Apache httpd 2.4.46 ((Unix))
|_http-title: Whack A Mole!
| http-methods:
|_ Potentially risky methods: TRACE
|_http-server-header: Apache/2.4.46 (Unix)
43022/tcp open ssh OpenSSH 8.4 (protocol 2.0)
| ssh-hostkey:
| 3072 7b:fc:37:b4:da:6e:c5:8e:a9:8b:b7:80:f5:cd:09:cb (RSA)
| 256 89:cd:ea:47:25:d9:8f:f8:94:c3:d6:5c:d4:05:ba:d0 (ECDSA)
|_ 256 c0:7c:6f:47:7e:94:cc:8b:f8:3d:a0:a6:1f:a9:27:11 (ED25519)
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 134.76 seconds
The target system appears to be Unix
UDP
┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/hunit]
└─$ sudo nmap -sU --top-ports 10000 $IP
Starting Nmap 7.95 ( https://nmap.org ) at 2025-03-30 20:10 CEST
Nmap scan report for 192.168.185.125
Host is up (0.022s latency).
All 10000 scanned ports on 192.168.185.125 are in ignored states.
Not shown: 10000 open|filtered udp ports (no-response)
Nmap done: 1 IP address (1 host up) scanned in 229.78 seconds