RustScan


┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE]
└─$ rustscan --no-banner --scripts none -a $IP 
 
Open 192.168.107.200:22
Open 192.168.107.200:80
Open 192.168.107.200:7680
192.168.107.200 -> [22,80,7680]

Nmap


┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE]
└─$ nmap -Pn -p- -T5 --min-parallelism 100 --max-parallelism 100 $IP --open 
Starting Nmap 7.95 ( https://nmap.org ) at 2025-06-29 14:10 CEST
Nmap scan report for 192.168.107.200
Host is up (0.022s latency).
Not shown: 65532 filtered tcp ports (no-response)
Some closed ports may be reported as filtered due to --defeat-rst-ratelimit
PORT     STATE SERVICE
22/tcp   open  ssh
80/tcp   open  http
7680/tcp open  pando-pub
 
Nmap done: 1 IP address (1 host up) scanned in 78.67 seconds
 
 
┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE]
└─$ nmap -Pn -sC -sV -p22,80,7680 $IP                   
Starting Nmap 7.95 ( https://nmap.org ) at 2025-06-29 14:12 CEST
Nmap scan report for 192.168.107.200
Host is up (0.022s latency).
 
PORT     STATE SERVICE    VERSION
22/tcp   open  ssh        OpenSSH for_Windows_8.1 (protocol 2.0)
| ssh-hostkey: 
|   3072 21:76:63:1c:3b:10:a6:a7:73:d6:e7:dd:1e:a2:b6:83 (RSA)
|   256 62:a8:39:f6:ab:92:cd:26:03:bf:1e:28:25:4e:8e:7a (ECDSA)
|_  256 02:39:7c:e2:af:6a:44:98:ec:9a:28:98:a0:8b:fe:c4 (ED25519)
80/tcp   open  http       PHP cli server 5.5 or later (PHP 7.3.33)
| http-title: Site doesn't have a title (text/html; charset=UTF-8).
|_Requested resource was login.php
| http-cookie-flags: 
|   /: 
|     PHPSESSID: 
|_      httponly flag not set
7680/tcp open  pando-pub?
 
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 53.16 seconds

The target system is a Windows host.

UDP


┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE]
└─$ sudo nmap -Pn -sU --top-ports 1000 $IP --open
Starting Nmap 7.95 ( https://nmap.org ) at 2025-06-29 14:10 CEST
Nmap scan report for 192.168.107.200
Host is up.
All 1000 scanned ports on 192.168.107.200 are in ignored states.
Not shown: 1000 open|filtered udp ports (no-response)
 
Nmap done: 1 IP address (1 host up) scanned in 206.90 seconds