Thompson_Recon

RustScan

---

┌──(kali㉿kali)-[~/archive/thm/thompson]
└─$ rustscan -a $IP
________________________________________
: https://discord.gg/GFrQsGy           :
: https://github.com/RustScan/RustScan :
 --------------------------------------
0day was here ♥
 
[~] The config file is expected to be at "/home/kali/.rustscan.toml"
[~] Automatically increasing ulimit value to 5000.
[!] File limit is lower than default batch size. Consider upping with --ulimit. May cause harm to sensitive servers
Open 10.10.254.199:22
Open 10.10.254.199:8009
Open 10.10.254.199:8080

Nmap

---

┌──(kali㉿kali)-[~/archive/thm/thompson]
└─$ nmap -sC -sV -p22,8080,8009 $IP
Starting Nmap 7.94SVN ( https://nmap.org ) at 2024-07-12 11:44 CEST
Nmap scan report for 10.10.254.199
Host is up (0.027s latency).
 
PORT     STATE SERVICE VERSION
22/tcp   open  ssh     OpenSSH 7.2p2 Ubuntu 4ubuntu2.8 (Ubuntu Linux; protocol 2.0)
| ssh-hostkey: 
|   2048 fc:05:24:81:98:7e:b8:db:05:92:a6:e7:8e:b0:21:11 (RSA)
|   256 60:c8:40:ab:b0:09:84:3d:46:64:61:13:fa:bc:1f:be (ECDSA)
|_  256 b5:52:7e:9c:01:9b:98:0c:73:59:20:35:ee:23:f1:a5 (ED25519)
8009/tcp open  ajp13   Apache Jserv (Protocol v1.3)
|_ajp-methods: Failed to get a valid response for the OPTION request
8080/tcp open  http    Apache Tomcat 8.5.5
|_http-title: Apache Tomcat/8.5.5
|_http-favicon: Apache Tomcat
Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel
 
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 7.90 seconds

The target system appears to be Ubuntu

UDP

---

┌──(kali㉿kali)-[~/archive/thm/thompson]
└─$ sudo nmap -Pn -sU --top-port 100 $IP
Starting Nmap 7.94SVN ( https://nmap.org ) at 2024-07-12 11:10 CEST
Nmap scan report for 10.10.254.199
Host is up (0.045s latency).
Not shown: 99 closed udp ports (port-unreach)
PORT   STATE         SERVICE
68/udp open|filtered dhcpc
 
Nmap done: 1 IP address (1 host up) scanned in 116.58 seconds