nmap

  ___                        
 ( _ ) _ __ ___   __ _ _ __  
 / _ \| '_ ` _ \ / _` | '_ \ 
| (_) | | | | | | (_| | |_) |
 \___/|_| |_| |_|\__,_| .__/ 
                      |_|    
          adot8 <3

[+] Scanning 10.10.10.63 [65535 TCP ports]


[+] Enumerating 10.10.10.63 [80,135,445,50000]

Starting Nmap 7.94SVN ( https://nmap.org ) at 2024-06-04 09:44 CDT
Nmap scan report for 10.10.10.63
Host is up (0.044s latency).

PORT      STATE SERVICE      VERSION
80/tcp    open  http         Microsoft IIS httpd 10.0
| http-methods: 
|_  Potentially risky methods: TRACE
|_http-server-header: Microsoft-IIS/10.0
|_http-title: Ask Jeeves
135/tcp   open  msrpc        Microsoft Windows RPC
445/tcp   open  microsoft-ds Microsoft Windows 7 - 10 microsoft-ds (workgroup: WORKGROUP)
50000/tcp open  http         Jetty 9.4.z-SNAPSHOT
|_http-title: Error 404 Not Found
|_http-server-header: Jetty(9.4.z-SNAPSHOT)
Service Info: Host: JEEVES; OS: Windows; CPE: cpe:/o:microsoft:windows

Host script results:
| smb2-time: 
|   date: 2024-06-04T19:44:43
|_  start_date: 2024-06-04T19:42:37
| smb2-security-mode: 
|   3:1:1: 
|_    Message signing enabled but not required
| smb-security-mode: 
|   authentication_level: user
|   challenge_response: supported
|_  message_signing: disabled (dangerous, but default)
|_clock-skew: mean: 4h59m59s, deviation: 0s, median: 4h59m59s

Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 47.37 seconds

[+] Enumerating 10.10.10.63 for vulnerabilities [80,135,445,50000]

Starting Nmap 7.94SVN ( https://nmap.org ) at 2024-06-04 09:45 CDT
Pre-scan script results:
| broadcast-avahi-dos: 
|   Discovered hosts:
|     224.0.0.251
|   After NULL UDP avahi packet DoS (CVE-2011-1002).
|_  Hosts are all up (not vulnerable).
Nmap scan report for 10.10.10.63
Host is up (0.044s latency).

PORT      STATE SERVICE
80/tcp    open  http
| http-csrf: 
| Spidering limited to: maxdepth=3; maxpagecount=20; withinhost=10.10.10.63
|   Found the following possible CSRF vulnerabilities: 
|     
|     Path: http://10.10.10.63:80/
|     Form id: 
|_    Form action: error.html
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
| http-enum: 
|_  /error.html: Potentially interesting folder
|_http-dombased-xss: Couldn't find any DOM based XSS.
135/tcp   open  msrpc
445/tcp   open  microsoft-ds
50000/tcp open  ibm-db2

Host script results:
|_smb-vuln-ms10-061: No accounts left to try
|_smb-vuln-ms10-054: false
|_samba-vuln-cve-2012-1182: No accounts left to try

Nmap done: 1 IP address (1 host up) scanned in 219.52 seconds

[+] Scanning 10.10.10.63 [1000 UDP ports]
Starting Nmap 7.94SVN ( https://nmap.org ) at 2024-06-04 09:49 CDT
Initiating Ping Scan at 09:49
Scanning 10.10.10.63 [4 ports]
Completed Ping Scan at 09:49, 0.10s elapsed (1 total hosts)
Initiating UDP Scan at 09:49
Scanning jeeves (10.10.10.63) [100 ports]
Completed UDP Scan at 09:49, 5.88s elapsed (100 total ports)
Nmap scan report for jeeves (10.10.10.63)
Host is up (0.047s latency).
All 100 scanned ports on jeeves (10.10.10.63) are in ignored states.
Not shown: 100 open|filtered udp ports (no-response)

Read data files from: /usr/bin/../share/nmap
Nmap done: 1 IP address (1 host up) scanned in 6.15 seconds
           Raw packets sent: 260 (15.876KB) | Rcvd: 121 (28.818KB)

[+] Completed!