Hack The Box
LinkedIn
  • Hack The Box
    • Windows Boxes
      • Mantis
        • Recon
          • nmap
        • Eumeration
          • 1337
          • 8080
          • 445
          • 88
          • 1433,50255
          • rpc
          • enum4linux
        • Foothold
          • Enumeration
          • james
        • Priv Esc
        • Credentials
      • Outdated
        • Recon
          • nmap
        • Eumeration
          • 445
          • 25
        • Foothold
        • Priv Esc
        • Credentials
      • Driver
        • Recon
          • nmap
        • Eumeration
          • 445
          • 80
        • Foothold
        • Priv Esc
        • Credentials
      • Remote
        • Recon
          • nmap
        • Eumeration
          • 21
          • 111
          • 80
        • Foothold
        • Priv Esc
        • Credentials
      • Forest
        • Recon
          • nmap
        • Enumeration
          • 88
          • 445
          • 389,135
        • Foothold
          • Enumeration
          • Priv Esc
      • Manager
        • Recon
          • nmap
        • Enumeration
          • 80
          • 1433
          • 445
          • 88
        • Foothold
          • Enumeration
          • Priv Esc
      • Hospital
        • Recon
          • nmap
        • Enumeration
          • 80
          • 8080
        • Foothold
          • Priv Esc (Web Server)
          • Pivot
          • Priv Esc (Windows)
      • Querier
        • Recon
          • nmap
        • Enumeration
          • 445
          • 1433
          • digging
        • Foothold
        • Enumeration
        • Priv Esc
      • Sauna
        • Recon
          • nmap
        • Eunmeration
          • 80
            • ffuf
          • 445
          • 88
        • Foothold
        • Eumeration
        • Priv Esc
          • svc_mgr
        • Credentials
      • Active
        • Recon
          • nmap
        • Eumeration
          • 445
          • 88
          • enum4linux
        • Foothold
          • Enumeration
        • Priv Esc
      • Resolute
        • Recon
          • nmap
        • Eumeration
          • enum4linux
          • 445
          • rpc
          • Page 3
        • Foothold
          • Enumeration
        • Priv Esc
          • ryan
          • nt authority\system
        • Users
      • Legacy
        • Recon
          • nmap
        • Eumeration
          • 445
          • enum4linux
          • Page 2
        • Foothold
          • Enumeration
        • Priv Esc
        • Credentials
      • Granny
        • Recon
          • nmap
        • Eumeration
          • 80
        • Foothold
          • Enumeration
        • Priv Esc
        • Credentials
      • Grandpa
        • Recon
          • nmap
        • Eumeration
          • 80
        • Foothold
          • Enumeration
        • Priv Esc
        • Credentials
      • Bounty
        • Recon
          • nmap
        • Eumeration
          • 80
          • Page 1
          • Page 2
        • Foothold
          • Enumeration
        • Priv Esc
        • Credentials
      • Cascade
        • Recon
          • nmap
        • Eumeration
          • Page
          • Page 1
          • Page 2
          • enum4linux
        • Foothold
          • Enumeration
        • Priv Esc
        • Credentials
      • Mailing
        • Recon
          • nmap
        • Eumeration
          • 80
        • Foothold
        • Priv Esc
        • Credentials
    • Linux Boxes
      • Cypher
        • Recon
          • nmap
        • Eumeration
          • 80
          • Page 1
          • Page 2
        • Foothold
        • Priv Esc
        • Credentials
      • Union
        • Recon
          • nmap
        • Eumeration
          • 80
        • Foothold
        • Priv Esc
        • Credentials
      • Trick
        • Recon
          • nmap
        • Eumeration
          • 53
          • 25
          • 80
        • Foothold
        • Priv Esc
        • Credentials
      • Shoppy
        • Recon
          • nmap
        • Eumeration
          • 80
          • 9093
        • Foothold
        • Priv Esc
        • Credentials
      • Delivery
        • Recon
          • nmap
        • Eumeration
          • 80
          • 8065
        • Foothold
        • Priv Esc
        • Credentials
      • MetaTwo
        • Recon
          • nmap
        • Eumeration
          • 21
          • 80
        • Foothold
        • Priv Esc
        • Credentials
      • Codify
        • Recon
          • nmap
        • Eumeration
          • 80
            • ffuf
          • 22
          • 3000
        • Foothold
        • Priv Esc
          • joshua
          • root
        • emails
      • Valentine
        • Recon
          • nmap
          • vuln
        • Eumeration
          • 80
          • 443
          • 22
        • Foothold
          • Enumeration
        • Priv Esc
        • Credentials
      • Headless
        • Recon
          • nmap
        • Eumeration
          • 5000
          • 22
        • Foothold
          • Enumeration
        • Priv Esc
        • Credentials
      • Bizness
        • Recon
          • nmap
        • Eumeration
          • 443,80
          • 22
        • Foothold
          • Enumeration
        • Priv Esc
        • Credentials
      • Devvortex
        • Recon
          • nmap
        • Eumeration
          • 80
          • 22
        • Foothold
          • Enumeration
          • logan
        • Priv Esc
        • Credentials
      • Boardlight
        • Recon
          • nmap
        • Eumeration
          • Page
          • Page 1
          • Page 2
        • Foothold
          • Enumeration
        • Priv Esc
        • Credentials
      • Planning
        • Recon
          • nmap
        • Eumeration
          • 22
          • 80
        • Foothold
        • Priv Esc
        • Credentials
      • Dog
        • Recon
          • nmap
        • Eumeration
          • 80
        • Foothold
        • Priv Esc
        • Credentials
    • OSCP like Boxes
      • Linux
        • Jarvis
          • Recon
            • nmap
          • Eumeration
            • 80
            • 64999
          • Foothold
            • Enumeration
          • Priv Esc
            • Pepper
            • root
          • Credentials
        • UpDown
          • Recon
            • nmap
          • Eumeration
            • 80
          • Foothold
          • Priv Esc
          • Credentials
        • SolidState
          • Recon
            • nmap
          • Eumeration
            • 80
            • 4555
            • Page 2
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials
        • Node
          • Recon
            • nmap
          • Eumeration
            • 3000
          • Foothold
          • Priv Esc
            • tom
            • root
          • Credentials
        • Busqueda
          • Recon
            • nmap
          • Eumeration
            • 80
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials
        • Sau
          • Recon
            • nmap
          • Eumeration
            • 80
            • 55555
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials
        • Keeper
          • Recon
            • nmap
          • Eumeration
            • 80
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials
        • Broker
          • Recon
            • nmap
          • Eumeration
            • 80
            • 61613 61616
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials
        • Pandora
          • Recon
            • nmap
          • Eumeration
            • 80
            • 161 [UDP]
          • Foothold
            • Enumeration
          • Priv esc
            • Matt
            • root
          • Credentials
        • Soccer
          • Recon
            • nmap
          • Eumeration
            • 80
            • 9091
            • Page 2
          • Foothold
            • Enumeration
          • Priv Esc
            • Player
            • root
          • Credentials
        • Sense
          • Recon
            • nmap
            • web services
          • Eumeration
            • 80,443
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials
        • Nibbles
          • Recon
            • nmap
          • Eumeration
            • 80
              • Dir busting
          • Foothold
          • Priv Esc
          • Credentials
        • Editorial
          • Recon
            • nmap
          • Eumeration
            • 80
          • Foothold
          • Priv Esc
          • Credentials
      • Windows
        • Intelligence
          • Recon
            • nmap
            • web
          • Eumeration
            • 80
            • Page 1
            • Page 2
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials
        • StreamIO
          • Recon
            • nmap
            • web 443
          • Eumeration
            • 80
            • 443
            • Page 4
          • Exploit Chain
            • SQL Injection
            • Loggin into application
            • Exploiting master.php (Foothold)
          • Priv Esc
            • nikk37
            • JDGODD
            • Administrator/Martin
          • Credentials + Users
        • Escape
          • Recon
            • nmap
          • Eumeration
            • 445
            • 1433
            • Page 2
          • Foothold
            • Enumeration
          • Priv Esc
            • Ryan.Cooper
            • Administrator
            • Silver Ticket - Alternate Route
          • Credentials
        • SecNotes
          • Recon
            • nmap
          • Eumeration
            • 80
            • 8808
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials
        • Jeeves
          • Recon
            • nmap
          • Eumeration
            • 80
            • 5000
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials
        • Return
          • Recon
            • nmap
          • Eumeration
            • 80
          • Foothold
          • Priv Esc
          • Credentials
        • Active
          • Recon
            • nmap
            • enum4linux
          • Eumeration
            • 445
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials
        • Love
          • Recon
            • nmap
          • Eumeration
            • 80
            • Page 1
            • Page 2
          • Foothold
            • Intended route
            • Enumeration
          • Priv Esc
          • Credentials
        • ServMon
          • Recon
            • nmap
          • Eumeration
            • 21
            • 80
            • 8443
            • 445
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials
        • Support
          • Recon
            • nmap
          • Eumeration
            • 445
            • 88 Kerberos
            • 389
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials
        • Sauna
          • Recon
            • nmap
          • Eumeration
            • 80
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials
        • Forest
          • Recon
            • nmap
          • Eumeration
            • Page
            • Page 1
            • Page 2
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials
        • Perfection
          • Recon
            • nmap
          • Eumeration
            • 80
          • Foothold
          • Priv Esc
          • Credentials
    • Pro Labs
      • Dante
    • Template
      • Recon
        • nmap
      • Eumeration
        • Page
        • Page 1
        • Page 2
      • Foothold
      • Priv Esc
      • Credentials
Powered by GitBook
On this page

Was this helpful?

  1. Hack The Box
  2. Linux Boxes
  3. Dog
  4. Recon

nmap

❯ 8map 10.10.11.58
  ___
 ( _ ) _ __ ___   __ _ _ __
 / _ \| '_ ` _ \ / _` | '_ \
| (_) | | | | | | (_| | |_) |
 \___/|_| |_| |_|\__,_| .__/
                      |_|
          adot8 <3

[+] Scanning 10.10.11.58 [65535 TCP ports]


[+] Enumerating 10.10.11.58 [22,80]

Starting Nmap 7.95 ( https://nmap.org ) at 2025-06-06 23:30 CDT
Nmap scan report for 10.10.11.58
Host is up (0.044s latency).

PORT   STATE SERVICE VERSION
22/tcp open  ssh     OpenSSH 8.2p1 Ubuntu 4ubuntu0.12 (Ubuntu Linux; protocol 2.0)
| ssh-hostkey:
|   3072 97:2a:d2:2c:89:8a:d3:ed:4d:ac:00:d2:1e:87:49:a7 (RSA)
|   256 27:7c:3c:eb:0f:26:e9:62:59:0f:0f:b1:38:c9:ae:2b (ECDSA)
|_  256 93:88:47:4c:69:af:72:16:09:4c:ba:77:1e:3b:3b:eb (ED25519)
80/tcp open  http    Apache httpd 2.4.41 ((Ubuntu))
| http-robots.txt: 22 disallowed entries (15 shown)
| /core/ /profiles/ /README.md /web.config /admin
| /comment/reply /filter/tips /node/add /search /user/register
|_/user/password /user/login /user/logout /?q=admin /?q=comment/reply
|_http-title: Home | Dog
|_http-generator: Backdrop CMS 1 (https://backdropcms.org)
|_http-server-header: Apache/2.4.41 (Ubuntu)
| http-git:
|   10.10.11.58:80/.git/
|     Git repository found!
|     Repository description: Unnamed repository; edit this file 'description' to name the...
|_    Last commit message: todo: customize url aliases.  reference:https://docs.backdro...
Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel

Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 8.79 seconds

[+] Scanning 10.10.11.58 [1000 UDP ports]
Starting Nmap 7.95 ( https://nmap.org ) at 2025-06-06 23:30 CDT
Initiating Ping Scan at 23:30
Scanning 10.10.11.58 [4 ports]
Completed Ping Scan at 23:30, 0.07s elapsed (1 total hosts)
Initiating Parallel DNS resolution of 1 host. at 23:30
Completed Parallel DNS resolution of 1 host. at 23:30, 0.00s elapsed
Initiating UDP Scan at 23:30
Scanning 10.10.11.58 [100 ports]
Increasing send delay for 10.10.11.58 from 0 to 50 due to max_successful_tryno increase to 5
Increasing send delay for 10.10.11.58 from 50 to 100 due to 11 out of 11 dropped probes since last increase.
Increasing send delay for 10.10.11.58 from 100 to 200 due to max_successful_tryno increase to 6
Warning: 10.10.11.58 giving up on port because retransmission cap hit (6).
Increasing send delay for 10.10.11.58 from 200 to 400 due to 11 out of 11 dropped probes since last increase.
Increasing send delay for 10.10.11.58 from 400 to 800 due to 11 out of 11 dropped probes since last increase.
Completed UDP Scan at 23:31, 68.61s elapsed (100 total ports)
Nmap scan report for 10.10.11.58
Host is up (0.045s latency).
Not shown: 70 closed udp ports (port-unreach)
PORT      STATE         SERVICE
19/udp    open|filtered chargen
49/udp    open|filtered tacacs
67/udp    open|filtered dhcps
69/udp    open|filtered tftp
139/udp   open|filtered netbios-ssn
158/udp   open|filtered pcmail-srv
427/udp   open|filtered svrloc
443/udp   open|filtered https
445/udp   open|filtered microsoft-ds
497/udp   open|filtered retrospect
520/udp   open|filtered route
631/udp   open|filtered ipp
1023/udp  open|filtered unknown
1028/udp  open|filtered ms-lsa
1030/udp  open|filtered iad1
1813/udp  open|filtered radacct
1900/udp  open|filtered upnp
2000/udp  open|filtered cisco-sccp
2049/udp  open|filtered nfs
3283/udp  open|filtered netassistant
20031/udp open|filtered bakbonenetvault
30718/udp open|filtered unknown
32768/udp open|filtered omad
32771/udp open|filtered sometimes-rpc6
32815/udp open|filtered unknown
49154/udp open|filtered unknown
49156/udp open|filtered unknown
49186/udp open|filtered unknown
49191/udp open|filtered unknown
49201/udp open|filtered unknown

Read data files from: /usr/share/nmap
Nmap done: 1 IP address (1 host up) scanned in 68.81 seconds
           Raw packets sent: 516 (31.416KB) | Rcvd: 254 (37.633KB)

[+] Completed!
PreviousReconNextEumeration

Last updated 12 hours ago

Was this helpful?