Hack The Box
LinkedIn
  • Hack The Box
    • Windows Boxes
      • Mantis
        • Recon
          • nmap
        • Eumeration
          • 1337
          • 8080
          • 445
          • 88
          • 1433,50255
          • rpc
          • enum4linux
        • Foothold
          • Enumeration
          • james
        • Priv Esc
        • Credentials
      • Outdated
        • Recon
          • nmap
        • Eumeration
          • 445
          • 25
        • Foothold
        • Priv Esc
        • Credentials
      • Driver
        • Recon
          • nmap
        • Eumeration
          • 445
          • 80
        • Foothold
        • Priv Esc
        • Credentials
      • Remote
        • Recon
          • nmap
        • Eumeration
          • 21
          • 111
          • 80
        • Foothold
        • Priv Esc
        • Credentials
      • Forest
        • Recon
          • nmap
        • Enumeration
          • 88
          • 445
          • 389,135
        • Foothold
          • Enumeration
          • Priv Esc
      • Manager
        • Recon
          • nmap
        • Enumeration
          • 80
          • 1433
          • 445
          • 88
        • Foothold
          • Enumeration
          • Priv Esc
      • Hospital
        • Recon
          • nmap
        • Enumeration
          • 80
          • 8080
        • Foothold
          • Priv Esc (Web Server)
          • Pivot
          • Priv Esc (Windows)
      • Querier
        • Recon
          • nmap
        • Enumeration
          • 445
          • 1433
          • digging
        • Foothold
        • Enumeration
        • Priv Esc
      • Sauna
        • Recon
          • nmap
        • Eunmeration
          • 80
            • ffuf
          • 445
          • 88
        • Foothold
        • Eumeration
        • Priv Esc
          • svc_mgr
        • Credentials
      • Active
        • Recon
          • nmap
        • Eumeration
          • 445
          • 88
          • enum4linux
        • Foothold
          • Enumeration
        • Priv Esc
      • Resolute
        • Recon
          • nmap
        • Eumeration
          • enum4linux
          • 445
          • rpc
          • Page 3
        • Foothold
          • Enumeration
        • Priv Esc
          • ryan
          • nt authority\system
        • Users
      • Legacy
        • Recon
          • nmap
        • Eumeration
          • 445
          • enum4linux
          • Page 2
        • Foothold
          • Enumeration
        • Priv Esc
        • Credentials
      • Granny
        • Recon
          • nmap
        • Eumeration
          • 80
        • Foothold
          • Enumeration
        • Priv Esc
        • Credentials
      • Grandpa
        • Recon
          • nmap
        • Eumeration
          • 80
        • Foothold
          • Enumeration
        • Priv Esc
        • Credentials
      • Bounty
        • Recon
          • nmap
        • Eumeration
          • 80
          • Page 1
          • Page 2
        • Foothold
          • Enumeration
        • Priv Esc
        • Credentials
      • Cascade
        • Recon
          • nmap
        • Eumeration
          • Page
          • Page 1
          • Page 2
          • enum4linux
        • Foothold
          • Enumeration
        • Priv Esc
        • Credentials
      • Mailing
        • Recon
          • nmap
        • Eumeration
          • 80
        • Foothold
        • Priv Esc
        • Credentials
    • Linux Boxes
      • Cypher
        • Recon
          • nmap
        • Eumeration
          • 80
          • Page 1
          • Page 2
        • Foothold
        • Priv Esc
        • Credentials
      • Union
        • Recon
          • nmap
        • Eumeration
          • 80
        • Foothold
        • Priv Esc
        • Credentials
      • Trick
        • Recon
          • nmap
        • Eumeration
          • 53
          • 25
          • 80
        • Foothold
        • Priv Esc
        • Credentials
      • Shoppy
        • Recon
          • nmap
        • Eumeration
          • 80
          • 9093
        • Foothold
        • Priv Esc
        • Credentials
      • Delivery
        • Recon
          • nmap
        • Eumeration
          • 80
          • 8065
        • Foothold
        • Priv Esc
        • Credentials
      • MetaTwo
        • Recon
          • nmap
        • Eumeration
          • 21
          • 80
        • Foothold
        • Priv Esc
        • Credentials
      • Codify
        • Recon
          • nmap
        • Eumeration
          • 80
            • ffuf
          • 22
          • 3000
        • Foothold
        • Priv Esc
          • joshua
          • root
        • emails
      • Valentine
        • Recon
          • nmap
          • vuln
        • Eumeration
          • 80
          • 443
          • 22
        • Foothold
          • Enumeration
        • Priv Esc
        • Credentials
      • Headless
        • Recon
          • nmap
        • Eumeration
          • 5000
          • 22
        • Foothold
          • Enumeration
        • Priv Esc
        • Credentials
      • Bizness
        • Recon
          • nmap
        • Eumeration
          • 443,80
          • 22
        • Foothold
          • Enumeration
        • Priv Esc
        • Credentials
      • Devvortex
        • Recon
          • nmap
        • Eumeration
          • 80
          • 22
        • Foothold
          • Enumeration
          • logan
        • Priv Esc
        • Credentials
      • Boardlight
        • Recon
          • nmap
        • Eumeration
          • Page
          • Page 1
          • Page 2
        • Foothold
          • Enumeration
        • Priv Esc
        • Credentials
      • Planning
        • Recon
          • nmap
        • Eumeration
          • 22
          • 80
        • Foothold
        • Priv Esc
        • Credentials
      • Dog
        • Recon
          • nmap
        • Eumeration
          • 80
        • Foothold
        • Priv Esc
        • Credentials
    • OSCP like Boxes
      • Linux
        • Jarvis
          • Recon
            • nmap
          • Eumeration
            • 80
            • 64999
          • Foothold
            • Enumeration
          • Priv Esc
            • Pepper
            • root
          • Credentials
        • UpDown
          • Recon
            • nmap
          • Eumeration
            • 80
          • Foothold
          • Priv Esc
          • Credentials
        • SolidState
          • Recon
            • nmap
          • Eumeration
            • 80
            • 4555
            • Page 2
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials
        • Node
          • Recon
            • nmap
          • Eumeration
            • 3000
          • Foothold
          • Priv Esc
            • tom
            • root
          • Credentials
        • Busqueda
          • Recon
            • nmap
          • Eumeration
            • 80
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials
        • Sau
          • Recon
            • nmap
          • Eumeration
            • 80
            • 55555
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials
        • Keeper
          • Recon
            • nmap
          • Eumeration
            • 80
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials
        • Broker
          • Recon
            • nmap
          • Eumeration
            • 80
            • 61613 61616
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials
        • Pandora
          • Recon
            • nmap
          • Eumeration
            • 80
            • 161 [UDP]
          • Foothold
            • Enumeration
          • Priv esc
            • Matt
            • root
          • Credentials
        • Soccer
          • Recon
            • nmap
          • Eumeration
            • 80
            • 9091
            • Page 2
          • Foothold
            • Enumeration
          • Priv Esc
            • Player
            • root
          • Credentials
        • Sense
          • Recon
            • nmap
            • web services
          • Eumeration
            • 80,443
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials
        • Nibbles
          • Recon
            • nmap
          • Eumeration
            • 80
              • Dir busting
          • Foothold
          • Priv Esc
          • Credentials
        • Editorial
          • Recon
            • nmap
          • Eumeration
            • 80
          • Foothold
          • Priv Esc
          • Credentials
      • Windows
        • Intelligence
          • Recon
            • nmap
            • web
          • Eumeration
            • 80
            • Page 1
            • Page 2
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials
        • StreamIO
          • Recon
            • nmap
            • web 443
          • Eumeration
            • 80
            • 443
            • Page 4
          • Exploit Chain
            • SQL Injection
            • Loggin into application
            • Exploiting master.php (Foothold)
          • Priv Esc
            • nikk37
            • JDGODD
            • Administrator/Martin
          • Credentials + Users
        • Escape
          • Recon
            • nmap
          • Eumeration
            • 445
            • 1433
            • Page 2
          • Foothold
            • Enumeration
          • Priv Esc
            • Ryan.Cooper
            • Administrator
            • Silver Ticket - Alternate Route
          • Credentials
        • SecNotes
          • Recon
            • nmap
          • Eumeration
            • 80
            • 8808
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials
        • Jeeves
          • Recon
            • nmap
          • Eumeration
            • 80
            • 5000
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials
        • Return
          • Recon
            • nmap
          • Eumeration
            • 80
          • Foothold
          • Priv Esc
          • Credentials
        • Active
          • Recon
            • nmap
            • enum4linux
          • Eumeration
            • 445
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials
        • Love
          • Recon
            • nmap
          • Eumeration
            • 80
            • Page 1
            • Page 2
          • Foothold
            • Intended route
            • Enumeration
          • Priv Esc
          • Credentials
        • ServMon
          • Recon
            • nmap
          • Eumeration
            • 21
            • 80
            • 8443
            • 445
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials
        • Support
          • Recon
            • nmap
          • Eumeration
            • 445
            • 88 Kerberos
            • 389
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials
        • Sauna
          • Recon
            • nmap
          • Eumeration
            • 80
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials
        • Forest
          • Recon
            • nmap
          • Eumeration
            • Page
            • Page 1
            • Page 2
          • Foothold
            • Enumeration
          • Priv Esc
          • Credentials
        • Perfection
          • Recon
            • nmap
          • Eumeration
            • 80
          • Foothold
          • Priv Esc
          • Credentials
    • Pro Labs
      • Dante
    • Template
      • Recon
        • nmap
      • Eumeration
        • Page
        • Page 1
        • Page 2
      • Foothold
      • Priv Esc
      • Credentials
Powered by GitBook
On this page

Was this helpful?

  1. Hack The Box
  2. Linux Boxes
  3. Planning
  4. Recon

nmap

❯ 8map 10.10.11.68
  ___
 ( _ ) _ __ ___   __ _ _ __
 / _ \| '_ ` _ \ / _` | '_ \
| (_) | | | | | | (_| | |_) |
 \___/|_| |_| |_|\__,_| .__/
                      |_|
          adot8 <3

[+] Scanning 10.10.11.68 [65535 TCP ports]


[+] Enumerating 10.10.11.68 [22,80]

Starting Nmap 7.95 ( https://nmap.org ) at 2025-06-06 19:48 CDT
Nmap scan report for planning.htb (10.10.11.68)
Host is up (0.043s latency).

PORT   STATE SERVICE VERSION
22/tcp open  ssh     OpenSSH 9.6p1 Ubuntu 3ubuntu13.11 (Ubuntu Linux; protocol 2.0)
| ssh-hostkey:
|   256 62:ff:f6:d4:57:88:05:ad:f4:d3:de:5b:9b:f8:50:f1 (ECDSA)
|_  256 4c:ce:7d:5c:fb:2d:a0:9e:9f:bd:f5:5c:5e:61:50:8a (ED25519)
80/tcp open  http    nginx 1.24.0 (Ubuntu)
|_http-server-header: nginx/1.24.0 (Ubuntu)
|_http-title: Edukate - Online Education Website
Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel

Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 8.26 seconds

[+] Scanning 10.10.11.68 [1000 UDP ports]
Starting Nmap 7.95 ( https://nmap.org ) at 2025-06-06 19:48 CDT
Initiating Ping Scan at 19:48
Scanning 10.10.11.68 [4 ports]
Completed Ping Scan at 19:48, 0.08s elapsed (1 total hosts)
Initiating UDP Scan at 19:48
Scanning planning.htb (10.10.11.68) [100 ports]
Increasing send delay for 10.10.11.68 from 0 to 50 due to max_successful_tryno increase to 5
Increasing send delay for 10.10.11.68 from 50 to 100 due to 11 out of 12 dropped probes since last increase.
Increasing send delay for 10.10.11.68 from 100 to 200 due to 11 out of 12 dropped probes since last increase.
Increasing send delay for 10.10.11.68 from 200 to 400 due to 11 out of 11 dropped probes since last increase.
Completed UDP Scan at 19:49, 49.41s elapsed (100 total ports)
Nmap scan report for planning.htb (10.10.11.68)
Host is up (0.044s latency).
Not shown: 55 closed udp ports (port-unreach)
PORT      STATE         SERVICE
7/udp     open|filtered echo
17/udp    open|filtered qotd
67/udp    open|filtered dhcps
68/udp    open|filtered dhcpc
80/udp    open|filtered http
88/udp    open|filtered kerberos-sec
111/udp   open|filtered rpcbind
123/udp   open|filtered ntp
135/udp   open|filtered msrpc
136/udp   open|filtered profile
137/udp   open|filtered netbios-ns
138/udp   open|filtered netbios-dgm
139/udp   open|filtered netbios-ssn
158/udp   open|filtered pcmail-srv
177/udp   open|filtered xdmcp
497/udp   open|filtered retrospect
500/udp   open|filtered isakmp
593/udp   open|filtered http-rpc-epmap
626/udp   open|filtered serialnumberd
996/udp   open|filtered vsinet
999/udp   open|filtered applix
1022/udp  open|filtered exp2
1025/udp  open|filtered blackjack
1026/udp  open|filtered win-rpc
1028/udp  open|filtered ms-lsa
1646/udp  open|filtered radacct
1718/udp  open|filtered h225gatedisc
1719/udp  open|filtered h323gatestat
1812/udp  open|filtered radius
1900/udp  open|filtered upnp
2049/udp  open|filtered nfs
2223/udp  open|filtered rockwell-csp2
5060/udp  open|filtered sip
5353/udp  open|filtered zeroconf
5632/udp  open|filtered pcanywherestat
17185/udp open|filtered wdbrpc
20031/udp open|filtered bakbonenetvault
31337/udp open|filtered BackOrifice
32815/udp open|filtered unknown
49152/udp open|filtered unknown
49154/udp open|filtered unknown
49181/udp open|filtered unknown
49185/udp open|filtered unknown
49194/udp open|filtered unknown
65024/udp open|filtered unknown

Read data files from: /usr/share/nmap
Nmap done: 1 IP address (1 host up) scanned in 49.59 seconds
           Raw packets sent: 661 (42.899KB) | Rcvd: 61 (4.573KB)

[+] Completed!
PreviousReconNextEumeration

Last updated 18 hours ago

Was this helpful?