nmap

 ___                        
 ( _ ) _ __ ___   __ _ _ __  
 / _ \| '_ ` _ \ / _` | '_ \ 
| (_) | | | | | | (_| | |_) |
 \___/|_| |_| |_|\__,_| .__/ 
                      |_|    

[+] Scanning 10.10.155.127 [65535 ports]


[+] Enumerating 10.10.155.127 [22,80]

Starting Nmap 7.94SVN ( https://nmap.org ) at 2024-05-10 05:30 CDT
Nmap scan report for 10.10.155.127
Host is up (0.19s latency).

PORT   STATE SERVICE VERSION
22/tcp open  ssh     OpenSSH 7.6p1 Ubuntu 4ubuntu0.3 (Ubuntu Linux; protocol 2.0)
| ssh-hostkey: 
|   2048 65:1b:fc:74:10:39:df:dd:d0:2d:f0:53:1c:eb:6d:ec (RSA)
|   256 c4:28:04:a5:c3:b9:6a:95:5a:4d:7a:6e:46:e2:14:db (ECDSA)
|_  256 ba:07:bb:cd:42:4a:f2:93:d1:05:d0:b3:4c:b1:d9:b1 (ED25519)
80/tcp open  http    Apache httpd 2.4.29 ((Ubuntu))
|_http-title: Site doesn't have a title (text/html; charset=UTF-8).
|_http-server-header: Apache/2.4.29 (Ubuntu)
Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel

Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 13.30 seconds

[+] Enumerating 10.10.155.127 for vulnerabilities [22,80]

Starting Nmap 7.94SVN ( https://nmap.org ) at 2024-05-10 05:30 CDT
Pre-scan script results:
| broadcast-avahi-dos: 
|   Discovered hosts:
|     224.0.0.251
|   After NULL UDP avahi packet DoS (CVE-2011-1002).
|_  Hosts are all up (not vulnerable).
Nmap scan report for 10.10.155.127
Host is up (0.19s latency).

PORT   STATE SERVICE
22/tcp open  ssh
80/tcp open  http
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|_http-dombased-xss: Couldn't find any DOM based XSS.
|_http-vuln-cve2017-1001000: ERROR: Script execution failed (use -d to debug)
| http-internal-ip-disclosure: 
|_  Internal IP Leaked: 127.0.1.1
| http-enum: 
|   /admin/: Possible admin folder (401 Unauthorized)
|   /admin/admin/: Possible admin folder (401 Unauthorized)
|   /admin/account.php: Possible admin folder (401 Unauthorized)
|   /admin/index.php: Possible admin folder (401 Unauthorized)
|   /admin/login.php: Possible admin folder (401 Unauthorized)
|   /admin/admin.php: Possible admin folder (401 Unauthorized)
|   /admin/index.html: Possible admin folder (401 Unauthorized)
|   /admin/login.html: Possible admin folder (401 Unauthorized)
|   /admin/admin.html: Possible admin folder (401 Unauthorized)
|   /admin/home.php: Possible admin folder (401 Unauthorized)
|   /admin/controlpanel.php: Possible admin folder (401 Unauthorized)
|   /admin/account.html: Possible admin folder (401 Unauthorized)
|   /admin/admin_login.html: Possible admin folder (401 Unauthorized)
|   /admin/cp.php: Possible admin folder (401 Unauthorized)
|   /admin/admin_login.php: Possible admin folder (401 Unauthorized)
|   /admin/admin-login.php: Possible admin folder (401 Unauthorized)
|   /admin/home.html: Possible admin folder (401 Unauthorized)
|   /admin/admin-login.html: Possible admin folder (401 Unauthorized)
|   /admin/adminLogin.html: Possible admin folder (401 Unauthorized)
|   /admin/controlpanel.html: Possible admin folder (401 Unauthorized)
|   /admin/cp.html: Possible admin folder (401 Unauthorized)
|   /admin/adminLogin.php: Possible admin folder (401 Unauthorized)
|   /admin/account.cfm: Possible admin folder (401 Unauthorized)
|   /admin/index.cfm: Possible admin folder (401 Unauthorized)
|   /admin/login.cfm: Possible admin folder (401 Unauthorized)
|   /admin/admin.cfm: Possible admin folder (401 Unauthorized)
|   /admin/admin_login.cfm: Possible admin folder (401 Unauthorized)
|   /admin/controlpanel.cfm: Possible admin folder (401 Unauthorized)
|   /admin/cp.cfm: Possible admin folder (401 Unauthorized)
|   /admin/adminLogin.cfm: Possible admin folder (401 Unauthorized)
|   /admin/admin-login.cfm: Possible admin folder (401 Unauthorized)
|   /admin/home.cfm: Possible admin folder (401 Unauthorized)
|   /admin/account.asp: Possible admin folder (401 Unauthorized)
|   /admin/index.asp: Possible admin folder (401 Unauthorized)
|   /admin/login.asp: Possible admin folder (401 Unauthorized)
|   /admin/admin.asp: Possible admin folder (401 Unauthorized)
|   /admin/home.asp: Possible admin folder (401 Unauthorized)
|   /admin/controlpanel.asp: Possible admin folder (401 Unauthorized)
|   /admin/admin-login.asp: Possible admin folder (401 Unauthorized)
|   /admin/cp.asp: Possible admin folder (401 Unauthorized)
|   /admin/admin_login.asp: Possible admin folder (401 Unauthorized)
|   /admin/adminLogin.asp: Possible admin folder (401 Unauthorized)
|   /admin/account.aspx: Possible admin folder (401 Unauthorized)
|   /admin/index.aspx: Possible admin folder (401 Unauthorized)
|   /admin/login.aspx: Possible admin folder (401 Unauthorized)
|   /admin/admin.aspx: Possible admin folder (401 Unauthorized)
|   /admin/home.aspx: Possible admin folder (401 Unauthorized)
|   /admin/controlpanel.aspx: Possible admin folder (401 Unauthorized)
|   /admin/admin-login.aspx: Possible admin folder (401 Unauthorized)
|   /admin/cp.aspx: Possible admin folder (401 Unauthorized)
|   /admin/admin_login.aspx: Possible admin folder (401 Unauthorized)
|   /admin/adminLogin.aspx: Possible admin folder (401 Unauthorized)
|   /admin/index.jsp: Possible admin folder (401 Unauthorized)
|   /admin/login.jsp: Possible admin folder (401 Unauthorized)
|   /admin/admin.jsp: Possible admin folder (401 Unauthorized)
|   /admin/home.jsp: Possible admin folder (401 Unauthorized)
|   /admin/controlpanel.jsp: Possible admin folder (401 Unauthorized)
|   /admin/admin-login.jsp: Possible admin folder (401 Unauthorized)
|   /admin/cp.jsp: Possible admin folder (401 Unauthorized)
|   /admin/account.jsp: Possible admin folder (401 Unauthorized)
|   /admin/admin_login.jsp: Possible admin folder (401 Unauthorized)
|   /admin/adminLogin.jsp: Possible admin folder (401 Unauthorized)
|   /admin/backup/: Possible backup (401 Unauthorized)
|   /admin/download/backup.sql: Possible database backup (401 Unauthorized)
|   /admin/upload.php: Admin File Upload (401 Unauthorized)
|   /admin/CiscoAdmin.jhtml: Cisco Collaboration Server (401 Unauthorized)
|   /admin/libraries/ajaxfilemanager/ajaxfilemanager.php: Log1 CMS (401 Unauthorized)
|   /admin/view/javascript/fckeditor/editor/filemanager/connectors/test.html: OpenCart/FCKeditor File upload (401 Unauthorized)
|   /admin/includes/tiny_mce/plugins/tinybrowser/upload.php: CompactCMS or B-Hind CMS/FCKeditor File upload (401 Unauthorized)
|   /admin/includes/FCKeditor/editor/filemanager/upload/test.html: ASP Simple Blog / FCKeditor File Upload (401 Unauthorized)
|   /admin/jscript/upload.php: Lizard Cart/Remote File upload (401 Unauthorized)
|   /admin/jscript/upload.html: Lizard Cart/Remote File upload (401 Unauthorized)
|   /admin/jscript/upload.pl: Lizard Cart/Remote File upload (401 Unauthorized)
|   /admin/jscript/upload.asp: Lizard Cart/Remote File upload (401 Unauthorized)
|_  /admin/environment.xml: Moodle files (401 Unauthorized)
| http-fileupload-exploiter: 
|   
|     Couldn't find a file-type field.
|   
|_    Couldn't find a file-type field.

Nmap done: 1 IP address (1 host up) scanned in 89.37 seconds

[+] Completed!

PreviousRecon NextEnumeration

Last updated 9 months ago

___ ( _ ) _ __ ___ __ _ _ __ / _ \| '_ ` _ \ / _` | '_ \ | (_) | | | | | | (_| | |_) | \___/|_| |_| |_|\__,_| .__/ |_| [+] Scanning 10.10.155.127 [65535 ports] [+] Enumerating 10.10.155.127 [22,80] Starting Nmap 7.94SVN ( https://nmap.org ) at 2024-05-10 05:30 CDT Nmap scan report for 10.10.155.127 Host is up (0.19s latency). PORT STATE SERVICE VERSION 22/tcp open ssh OpenSSH 7.6p1 Ubuntu 4ubuntu0.3 (Ubuntu Linux; protocol 2.0) | ssh-hostkey: | 2048 65:1b:fc:74:10:39:df:dd:d0:2d:f0:53:1c:eb:6d:ec (RSA) | 256 c4:28:04:a5:c3:b9:6a:95:5a:4d:7a:6e:46:e2:14:db (ECDSA) |_ 256 ba:07:bb:cd:42:4a:f2:93:d1:05:d0:b3:4c:b1:d9:b1 (ED25519) 80/tcp open http Apache httpd 2.4.29 ((Ubuntu)) |_http-title: Site doesn't have a title (text/html; charset=UTF-8). |_http-server-header: Apache/2.4.29 (Ubuntu) Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 13.30 seconds [+] Enumerating 10.10.155.127 for vulnerabilities [22,80] Starting Nmap 7.94SVN ( https://nmap.org ) at 2024-05-10 05:30 CDT Pre-scan script results: | broadcast-avahi-dos: | Discovered hosts: | 224.0.0.251 | After NULL UDP avahi packet DoS (CVE-2011-1002). |_ Hosts are all up (not vulnerable). Nmap scan report for 10.10.155.127 Host is up (0.19s latency). PORT STATE SERVICE 22/tcp open ssh 80/tcp open http |_http-csrf: Couldn't find any CSRF vulnerabilities. |_http-stored-xss: Couldn't find any stored XSS vulnerabilities. |_http-dombased-xss: Couldn't find any DOM based XSS. |_http-vuln-cve2017-1001000: ERROR: Script execution failed (use -d to debug) | http-internal-ip-disclosure: |_ Internal IP Leaked: 127.0.1.1 | http-enum: | /admin/: Possible admin folder (401 Unauthorized) | /admin/admin/: Possible admin folder (401 Unauthorized) | /admin/account.php: Possible admin folder (401 Unauthorized) | /admin/index.php: Possible admin folder (401 Unauthorized) | /admin/login.php: Possible admin folder (401 Unauthorized) | /admin/admin.php: Possible admin folder (401 Unauthorized) | /admin/index.html: Possible admin folder (401 Unauthorized) | /admin/login.html: Possible admin folder (401 Unauthorized) | /admin/admin.html: Possible admin folder (401 Unauthorized) | /admin/home.php: Possible admin folder (401 Unauthorized) | /admin/controlpanel.php: Possible admin folder (401 Unauthorized) | /admin/account.html: Possible admin folder (401 Unauthorized) | /admin/admin_login.html: Possible admin folder (401 Unauthorized) | /admin/cp.php: Possible admin folder (401 Unauthorized) | /admin/admin_login.php: Possible admin folder (401 Unauthorized) | /admin/admin-login.php: Possible admin folder (401 Unauthorized) | /admin/home.html: Possible admin folder (401 Unauthorized) | /admin/admin-login.html: Possible admin folder (401 Unauthorized) | /admin/adminLogin.html: Possible admin folder (401 Unauthorized) | /admin/controlpanel.html: Possible admin folder (401 Unauthorized) | /admin/cp.html: Possible admin folder (401 Unauthorized) | /admin/adminLogin.php: Possible admin folder (401 Unauthorized) | /admin/account.cfm: Possible admin folder (401 Unauthorized) | /admin/index.cfm: Possible admin folder (401 Unauthorized) | /admin/login.cfm: Possible admin folder (401 Unauthorized) | /admin/admin.cfm: Possible admin folder (401 Unauthorized) | /admin/admin_login.cfm: Possible admin folder (401 Unauthorized) | /admin/controlpanel.cfm: Possible admin folder (401 Unauthorized) | /admin/cp.cfm: Possible admin folder (401 Unauthorized) | /admin/adminLogin.cfm: Possible admin folder (401 Unauthorized) | /admin/admin-login.cfm: Possible admin folder (401 Unauthorized) | /admin/home.cfm: Possible admin folder (401 Unauthorized) | /admin/account.asp: Possible admin folder (401 Unauthorized) | /admin/index.asp: Possible admin folder (401 Unauthorized) | /admin/login.asp: Possible admin folder (401 Unauthorized) | /admin/admin.asp: Possible admin folder (401 Unauthorized) | /admin/home.asp: Possible admin folder (401 Unauthorized) | /admin/controlpanel.asp: Possible admin folder (401 Unauthorized) | /admin/admin-login.asp: Possible admin folder (401 Unauthorized) | /admin/cp.asp: Possible admin folder (401 Unauthorized) | /admin/admin_login.asp: Possible admin folder (401 Unauthorized) | /admin/adminLogin.asp: Possible admin folder (401 Unauthorized) | /admin/account.aspx: Possible admin folder (401 Unauthorized) | /admin/index.aspx: Possible admin folder (401 Unauthorized) | /admin/login.aspx: Possible admin folder (401 Unauthorized) | /admin/admin.aspx: Possible admin folder (401 Unauthorized) | /admin/home.aspx: Possible admin folder (401 Unauthorized) | /admin/controlpanel.aspx: Possible admin folder (401 Unauthorized) | /admin/admin-login.aspx: Possible admin folder (401 Unauthorized) | /admin/cp.aspx: Possible admin folder (401 Unauthorized) | /admin/admin_login.aspx: Possible admin folder (401 Unauthorized) | /admin/adminLogin.aspx: Possible admin folder (401 Unauthorized) | /admin/index.jsp: Possible admin folder (401 Unauthorized) | /admin/login.jsp: Possible admin folder (401 Unauthorized) | /admin/admin.jsp: Possible admin folder (401 Unauthorized) | /admin/home.jsp: Possible admin folder (401 Unauthorized) | /admin/controlpanel.jsp: Possible admin folder (401 Unauthorized) | /admin/admin-login.jsp: Possible admin folder (401 Unauthorized) | /admin/cp.jsp: Possible admin folder (401 Unauthorized) | /admin/account.jsp: Possible admin folder (401 Unauthorized) | /admin/admin_login.jsp: Possible admin folder (401 Unauthorized) | /admin/adminLogin.jsp: Possible admin folder (401 Unauthorized) | /admin/backup/: Possible backup (401 Unauthorized) | /admin/download/backup.sql: Possible database backup (401 Unauthorized) | /admin/upload.php: Admin File Upload (401 Unauthorized) | /admin/CiscoAdmin.jhtml: Cisco Collaboration Server (401 Unauthorized) | /admin/libraries/ajaxfilemanager/ajaxfilemanager.php: Log1 CMS (401 Unauthorized) | /admin/view/javascript/fckeditor/editor/filemanager/connectors/test.html: OpenCart/FCKeditor File upload (401 Unauthorized) | /admin/includes/tiny_mce/plugins/tinybrowser/upload.php: CompactCMS or B-Hind CMS/FCKeditor File upload (401 Unauthorized) | /admin/includes/FCKeditor/editor/filemanager/upload/test.html: ASP Simple Blog / FCKeditor File Upload (401 Unauthorized) | /admin/jscript/upload.php: Lizard Cart/Remote File upload (401 Unauthorized) | /admin/jscript/upload.html: Lizard Cart/Remote File upload (401 Unauthorized) | /admin/jscript/upload.pl: Lizard Cart/Remote File upload (401 Unauthorized) | /admin/jscript/upload.asp: Lizard Cart/Remote File upload (401 Unauthorized) |_ /admin/environment.xml: Moodle files (401 Unauthorized) | http-fileupload-exploiter: | | Couldn't find a file-type field. | |_ Couldn't find a file-type field. Nmap done: 1 IP address (1 host up) scanned in 89.37 seconds [+] Completed!