Writeup

1. IP Address # Machine Address 10.10.11.146 # Local Address 10.10.14.68 2. Nmap nmap -sV -sC -oA nmap/catach 10.10.11.150 # Nmap 7.92 scan initiated Wed Mar 23 00:34:46 2022 as: nmap -sV -sC -oA nmap/catach 10.10.11.150 Nmap scan report for 10.10.11.150 Host is up (0.24s latency). Not shown: 996 closed tcp ports (conn-refused) PORT STATE SERVICE VERSION 22/tcp open ssh OpenSSH 8.2p1 Ubuntu 4ubuntu0.4 (Ubuntu Linux; protocol 2.0) | ssh-hostkey: | 3072 48:ad:d5:b8:3a:9f:bc:be:f7:e8:20:1e:f6:bf:de:ae (RSA) | 256 b7:89:6c:0b:20:ed:49:b2:c1:86:7c:29:92:74:1c:1f (ECDSA) |_ 256 18:cd:9d:08:a6:21:a8:b8:b6:f7:9f:8d:40:51:54:fb (ED25519) 80/tcp open http Apache httpd 2....

1. IP Address # Machine Address 10.10.11.146 # Local Address 10.10.14.68 2. Nmap Starting Nmap 7.92 ( https://nmap.org ) at 2022-03-08 05:40 EST Nmap scan report for 10.10.11.146 Host is up (0.23s latency). Not shown: 998 closed tcp ports (conn-refused) PORT STATE SERVICE VERSION 22/tcp open ssh OpenSSH 8.2 (protocol 2.0) | ssh-hostkey: | 3072 be:66:06:dd:20:77:ef:98:7f:6e:73:4a:98:a5:d8:f0 (RSA) | 256 1f:a2:09:72:70:68:f4:58:ed:1f:6c:49:7d:e2:13:39 (ECDSA) |_ 256 70:15:39:94:c2:cd:64:cb:b2:3b:d1:3e:f6:09:44:e8 (ED25519) 80/tcp open http Apache httpd 2....

1. IP Address # Machine Address 10.10.11.148 # Local Address 10.10.14.26 2. Nmap cli: nmap -sV -sC -oA nmap/routerspace 10.10.11.148 out: # Nmap 7.92 scan initiated Thu Mar 3 22:22:16 2022 as: nmap -sV -sC -oA nmap/routerspace 10.10.11.148 Nmap scan report for 10.10.11.148 Host is up (0.24s latency). Not shown: 998 filtered tcp ports (no-response) PORT STATE SERVICE VERSION 22/tcp open ssh (protocol 2.0) | fingerprint-strings: | NULL: |_ SSH-2.0-RouterSpace Packet Filtering V1 | ssh-hostkey: | 3072 f4:e4:c8:0a:a6:af:66:93:af:69:5a:a9:bc:75:f9:0c (RSA) | 256 7f:05:cd:8c:42:7b:a9:4a:b2:e6:35:2c:c4:59:78:02 (ECDSA) |_ 256 2f:d7:a8:8b:be:2d:10:b0:c9:b4:29:52:a8:94:24:78 (ED25519) 80/tcp open http | fingerprint-strings: | FourOhFourRequest: | HTTP/1....

1. IP Address # Machine Address 10.10.11.136 # Local Address 10.10.14.4 2. Nmap nmap -sV -sC -oA nmap/overflow 10.10.11.119 Out: Starting Nmap 7.91 ( https://nmap.org ) at 2022-02-27 01:01 EST Nmap scan report for 10.10.11.119 Host is up (0.24s latency). Not shown: 997 closed ports PORT STATE SERVICE VERSION 22/tcp open ssh OpenSSH 7.6p1 Ubuntu 4ubuntu0.5 (Ubuntu Linux; protocol 2.0) | ssh-hostkey: | 2048 eb:7c:15:8f:f2:cc:d4:26:54:c1:e1:57:0d:d5:b6:7c (RSA) | 256 d9:5d:22:85:03:de:ad:a0:df:b0:c3:00:aa:87:e8:9c (ECDSA) |_ 256 fa:ec:32:f9:47:17:60:7e:e0:ba:b6:d1:77:fb:07:7b (ED25519) 25/tcp open smtp Postfix smtpd |_smtp-commands: overflow, PIPELINING, SIZE 10240000, VRFY, ETRN, STARTTLS, ENHANCEDSTATUSCODES, 8BITMIME, DSN, SMTPUTF8, 80/tcp open http Apache httpd 2....

1. IP Address # Machine IP 10.10.11.124 2. Nmap nmap -sV -sC -oA nmap/shibboleth 10.10.11.124 Starting Nmap 7.91 ( https://nmap.org ) at 2022-02-25 00:44 EST Nmap scan report for 10.10.11.124 Host is up (0.25s latency). Not shown: 999 closed ports PORT STATE SERVICE VERSION 80/tcp open http Apache httpd 2.4.41 |_http-server-header: Apache/2.4.41 (Ubuntu) |_http-title: Did not follow redirect to http://shibboleth.htb/ Service Info: Host: shibboleth.htb Service detection performed. Please report any incorrect results at https://nmap....