Network
TCP
# Nmap 7.70 scan initiated Wed Apr 24 07:09:09 2019 as: nmap -sV -sC -oA nmap --script safe -T4 10.10.10.82
Pre-scan script results:
| broadcast-dhcp-discover:
| Response 1 of 1:
| IP Offered: 10.0.2.16
| Subnet Mask: 255.255.255.0
| Router: 10.0.2.2
| Domain Name Server: 10.0.2.3
|_ Server Identifier: 10.0.2.2
|_eap-info: please specify an interface with -e
| targets-asn:
|_ targets-asn.asn is a mandatory parameter
Nmap scan report for 10.10.10.82 (10.10.10.82)
Host is up (0.15s latency).
Not shown: 988 closed ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 8.5
| http-comments-displayer:
| Spidering limited to: maxdepth=3; maxpagecount=20; withinhost=10.10.10.82
|
| Path: http://10.10.10.82:80/
| Line number: 7
| Comment:
| <!--
| body {
| color:#000000;
| background-color:#0072C6;
| margin:0;
| }
|
| #container {
| margin-left:auto;
| margin-right:auto;
| text-align:center;
| }
|
| a img {
| border:none;
| }
|
|_ -->
|_http-date: Wed, 24 Apr 2019 11:10:45 GMT; -1m29s from local time.
|_http-fetch: Please enter the complete path of the directory to save data in.
| http-headers:
| Content-Length: 701
| Content-Type: text/html
| Last-Modified: Wed, 03 Jan 2018 00:36:17 GMT
| Accept-Ranges: bytes
| ETag: "1114bde2a84d31:0"
| Server: Microsoft-IIS/8.5
| X-Powered-By: ASP.NET
| Date: Wed, 24 Apr 2019 11:10:45 GMT
| Connection: close
|
|_ (Request type: HEAD)
| http-methods:
|_ Potentially risky methods: TRACE
|_http-mobileversion-checker: No mobile version detected.
|_http-referer-checker: Couldn't find any cross-domain scripts.
|_http-security-headers:
|_http-server-header: Microsoft-IIS/8.5
|_http-title: IIS Windows Server
| http-useragent-tester:
| Status for browser useragent: 200
| Allowed User Agents:
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
| libwww
| lwp-trivial
| libcurl-agent/1.0
| PHP/
| Python-urllib/2.5
| GT::WWW
| Snoopy
| MFC_Tear_Sample
| HTTP::Lite
| PHPCrawl
| URI::Fetch
| Zend_Http_Client
| http client
| PECL::HTTP
| Wget/1.13.4 (linux-gnu)
|_ WWW-Mechanize/1.34
|_http-xssed: No previously reported XSS vuln.
135/tcp open msrpc Microsoft Windows RPC
139/tcp open netbios-ssn Microsoft Windows netbios-ssn
|_smb-enum-services: ERROR: Script execution failed (use -d to debug)
445/tcp open microsoft-ds Microsoft Windows Server 2008 R2 - 2012 microsoft-ds
|_smb-enum-services: ERROR: Script execution failed (use -d to debug)
1521/tcp open oracle-tns Oracle TNS listener 11.2.0.2.0 (unauthorized)
|_unusual-port: oracle-tns unexpected on port tcp/1521
49152/tcp open msrpc Microsoft Windows RPC
49153/tcp open msrpc Microsoft Windows RPC
49154/tcp open msrpc Microsoft Windows RPC
49155/tcp open msrpc Microsoft Windows RPC
49158/tcp open msrpc Microsoft Windows RPC
49160/tcp open oracle-tns Oracle TNS listener (requires service name)
49161/tcp open msrpc Microsoft Windows RPC
Service Info: OSs: Windows, Windows Server 2008 R2 - 2012; CPE: cpe:/o:microsoft:windows
Host script results:
|_clock-skew: mean: -1m28s, deviation: 0s, median: -1m28s
| dns-blacklist:
| SPAM
|_ all.spamrats.com - FAIL
|_fcrdns: FAIL (No A record)
|_ipidseq: Unknown
|_msrpc-enum: No accounts left to try
|_path-mtu: PMTU == 1500
| qscan:
| PORT FAMILY MEAN (us) STDDEV LOSS (%)
| 1 0 215971.50 42529.14 0.0%
| 80 0 191252.50 41690.66 0.0%
| 135 0 188452.30 37772.99 0.0%
| 139 0 195588.60 38836.83 0.0%
| 445 0 191105.30 40361.52 0.0%
| 1521 0 192247.10 41941.94 0.0%
| 49152 0 186131.00 35036.00 0.0%
| 49153 0 215171.70 47084.34 0.0%
|_49154 0 193628.90 40600.77 0.0%
| smb-mbenum:
|_ ERROR: Failed to connect to browser service: No accounts left to try
| smb-protocols:
| dialects:
| NT LM 0.12 (SMBv1) [dangerous, but default]
| 2.02
| 2.10
| 3.00
|_ 3.02
| smb-security-mode:
| authentication_level: user
| challenge_response: supported
|_ message_signing: supported
| smb2-capabilities:
| 2.02:
| Distributed File System
| 2.10:
| Distributed File System
| Leasing
| Multi-credit operations
| 3.00:
| Distributed File System
| Leasing
| Multi-credit operations
| 3.02:
| Distributed File System
| Leasing
|_ Multi-credit operations
| smb2-security-mode:
| 2.02:
|_ Message signing enabled but not required
| smb2-time:
| date: 2019-04-24 07:10:44
|_ start_date: 2019-04-22 01:23:56
Post-scan script results:
| reverse-index:
| 80/tcp: 10.10.10.82
| 135/tcp: 10.10.10.82
| 139/tcp: 10.10.10.82
| 445/tcp: 10.10.10.82
| 1521/tcp: 10.10.10.82
| 49152/tcp: 10.10.10.82
| 49153/tcp: 10.10.10.82
| 49154/tcp: 10.10.10.82
| 49155/tcp: 10.10.10.82
| 49158/tcp: 10.10.10.82
| 49160/tcp: 10.10.10.82
|_ 49161/tcp: 10.10.10.82
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Wed Apr 24 07:14:07 2019 -- 1 IP address (1 host up) scanned in 298.36 seconds
UDP