simon/CTF
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

init htb

Browse Source 
old htb folders
This commit is contained in:
Simon
2023-08-29 21:53:22 +02:00
parent 62ab804867
commit 82b0759f1e
21891 changed files with 6277643 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

0
HTB/admirer/results/admirer.htb/report/local.txt Normal file
View File

24
HTB/admirer/results/admirer.htb/report/notes.txt Normal file
View File

@@ -0,0 +1,24 @@
[*] ftp found on tcp/21.
[*] ssh found on tcp/22.
[*] http found on tcp/80.
[*] ftp found on tcp/21.
[*] ssh found on tcp/22.
[*] http found on tcp/80.

0
HTB/admirer/results/admirer.htb/report/proof.txt Normal file
View File

56
HTB/admirer/results/admirer.htb/scans/_commands.log Normal file
View File

@@ -0,0 +1,56 @@
nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN "/home/simon/htb/admirer/results/admirer.htb/scans/_quick_tcp_nmap.txt" -oX "/home/simon/htb/admirer/results/admirer.htb/scans/xml/_quick_tcp_nmap.xml" admirer.htb
nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN "/home/simon/htb/admirer/results/admirer.htb/scans/_full_tcp_nmap.txt" -oX "/home/simon/htb/admirer/results/admirer.htb/scans/xml/_full_tcp_nmap.xml" admirer.htb
nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN "/home/simon/htb/admirer/results/admirer.htb/scans/_quick_tcp_nmap.txt" -oX "/home/simon/htb/admirer/results/admirer.htb/scans/xml/_quick_tcp_nmap.xml" admirer.htb
nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN "/home/simon/htb/admirer/results/admirer.htb/scans/_full_tcp_nmap.txt" -oX "/home/simon/htb/admirer/results/admirer.htb/scans/xml/_full_tcp_nmap.xml" admirer.htb
nmap -vv --reason -Pn -T4 -sV -p 21 --script="banner,(ftp* or ssl*) and not (brute or broadcast or dos or external or fuzzer)" -oN "/home/simon/htb/admirer/results/admirer.htb/scans/tcp21/tcp_21_ftp_nmap.txt" -oX "/home/simon/htb/admirer/results/admirer.htb/scans/tcp21/xml/tcp_21_ftp_nmap.xml" admirer.htb
nmap -vv --reason -Pn -T4 -sV -p 22 --script="banner,ssh2-enum-algos,ssh-hostkey,ssh-auth-methods" -oN "/home/simon/htb/admirer/results/admirer.htb/scans/tcp22/tcp_22_ssh_nmap.txt" -oX "/home/simon/htb/admirer/results/admirer.htb/scans/tcp22/xml/tcp_22_ssh_nmap.xml" admirer.htb
feroxbuster -u http://admirer.htb:80/ -t 200 -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -x "txt,html,php,asp,aspx,jsp" -v -k -q -e -o "/home/simon/htb/admirer/results/admirer.htb/scans/tcp80/tcp_80_http_feroxbuster_directory-list-2.3-medium.txt"
curl -sSikf http://admirer.htb:80/.well-known/security.txt
curl -sSikf http://admirer.htb:80/robots.txt
curl -sSik http://admirer.htb:80/
nmap -vv --reason -Pn -T4 -sV -p 80 --script="banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN "/home/simon/htb/admirer/results/admirer.htb/scans/tcp80/tcp_80_http_nmap.txt" -oX "/home/simon/htb/admirer/results/admirer.htb/scans/tcp80/xml/tcp_80_http_nmap.xml" admirer.htb
curl -sk -o /dev/null -H "Host: xDoYNCjxMYRNSpcBglka.admirer.htb" http://admirer.htb:80/ -w "%{size_download}"
whatweb --color=never --no-errors -a 3 -v http://admirer.htb:80 2>&1
wkhtmltoimage --format png http://admirer.htb:80/ /home/simon/htb/admirer/results/admirer.htb/scans/tcp80/tcp_80_http_screenshot.png
ffuf -u http://admirer.htb:80/ -t 10 -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-110000.txt -H "Host: FUZZ.admirer.htb" -fs 6051 -noninteractive -s | tee "/home/simon/htb/admirer/results/admirer.htb/scans/tcp80/tcp_80_http_admirer.htb_vhosts_subdomains-top1million-110000.txt"
nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN "/home/simon/htb/admirer/results/admirer.htb/scans/_quick_tcp_nmap.txt" -oX "/home/simon/htb/admirer/results/admirer.htb/scans/xml/_quick_tcp_nmap.xml" admirer.htb
nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN "/home/simon/htb/admirer/results/admirer.htb/scans/_full_tcp_nmap.txt" -oX "/home/simon/htb/admirer/results/admirer.htb/scans/xml/_full_tcp_nmap.xml" admirer.htb
nmap -vv --reason -Pn -T4 -sV -p 21 --script="banner,(ftp* or ssl*) and not (brute or broadcast or dos or external or fuzzer)" -oN "/home/simon/htb/admirer/results/admirer.htb/scans/tcp21/tcp_21_ftp_nmap.txt" -oX "/home/simon/htb/admirer/results/admirer.htb/scans/tcp21/xml/tcp_21_ftp_nmap.xml" admirer.htb
nmap -vv --reason -Pn -T4 -sV -p 22 --script="banner,ssh2-enum-algos,ssh-hostkey,ssh-auth-methods" -oN "/home/simon/htb/admirer/results/admirer.htb/scans/tcp22/tcp_22_ssh_nmap.txt" -oX "/home/simon/htb/admirer/results/admirer.htb/scans/tcp22/xml/tcp_22_ssh_nmap.xml" admirer.htb
feroxbuster -u http://admirer.htb:80/ -t 200 -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -x "txt,html,php,asp,aspx,jsp" -v -k -q -e -o "/home/simon/htb/admirer/results/admirer.htb/scans/tcp80/tcp_80_http_feroxbuster_directory-list-2.3-medium.txt"
curl -sSikf http://admirer.htb:80/.well-known/security.txt
curl -sSikf http://admirer.htb:80/robots.txt
curl -sSik http://admirer.htb:80/
nmap -vv --reason -Pn -T4 -sV -p 80 --script="banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN "/home/simon/htb/admirer/results/admirer.htb/scans/tcp80/tcp_80_http_nmap.txt" -oX "/home/simon/htb/admirer/results/admirer.htb/scans/tcp80/xml/tcp_80_http_nmap.xml" admirer.htb
curl -sk -o /dev/null -H "Host: YsLYFYDTbeutUlseVUDG.admirer.htb" http://admirer.htb:80/ -w "%{size_download}"
whatweb --color=never --no-errors -a 3 -v http://admirer.htb:80 2>&1
wkhtmltoimage --format png http://admirer.htb:80/ /home/simon/htb/admirer/results/admirer.htb/scans/tcp80/tcp_80_http_screenshot.png
ffuf -u http://admirer.htb:80/ -t 10 -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-110000.txt -H "Host: FUZZ.admirer.htb" -fs 6051 -noninteractive -s | tee "/home/simon/htb/admirer/results/admirer.htb/scans/tcp80/tcp_80_http_admirer.htb_vhosts_subdomains-top1million-110000.txt"

21
HTB/admirer/results/admirer.htb/scans/_full_tcp_nmap.txt Normal file
View File

@@ -0,0 +1,21 @@
# Nmap 7.93 scan initiated Sat Jan 21 07:14:33 2023 as: nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN /home/simon/htb/admirer/results/admirer.htb/scans/_full_tcp_nmap.txt -oX /home/simon/htb/admirer/results/admirer.htb/scans/xml/_full_tcp_nmap.xml admirer.htb
Nmap scan report for admirer.htb (10.129.228.103)
Host is up, received user-set (0.058s latency).
Scanned at 2023-01-21 07:14:33 UTC for 44s
Not shown: 65532 closed tcp ports (conn-refused)
PORT STATE SERVICE REASON VERSION
21/tcp open ftp syn-ack vsftpd 3.0.3
22/tcp open ssh syn-ack OpenSSH 7.4p1 Debian 10+deb9u7 (protocol 2.0)
| ssh-hostkey:
| 2048 4a71e92163699dcbdd84021a2397e1b9 (RSA)
| ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDaQHjxkc8zeXPgI5C7066uFJaB6EjvTGDEwbfl0cwM95npP9G8icv1F/YQgKxqqcGzl+pVaAybRnQxiZkrZHbnJlMzUzNTxxI5cy+7W0dRZN4VH4YjkXFrZRw6dx/5L1wP4qLtdQ0tLHmgzwJZO+111mrAGXMt0G+SCnQ30U7vp95EtIC0gbiGDx0dDVgMeg43+LkzWG+Nj+mQ5KCQBjDLFaZXwCp5Pqfrpf3AmERjoFHIE8Df4QO3lKT9Ov1HWcnfFuqSH/pl5+m83ecQGS1uxAaokNfn9Nkg12dZP1JSk+Tt28VrpOZDKhVvAQhXWONMTyuRJmVg/hnrSfxTwbM9
| 256 c595b6214d46a425557a873e19a8e702 (ECDSA)
| ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBNHgxoAB6NHTQnBo+/MqdfMsEet9jVzP94okTOAWWMpWkWkT+X4EEWRzlxZKwb/dnt99LS8WNZkR0P9HQxMcIII=
| 256 d02dddd05c42f87b315abe57c4a9a756 (ED25519)
|_ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBqp21lADoWZ+184z0m9zCpORbmmngq+h498H9JVf7kP
80/tcp open http syn-ack Apache httpd 2.4.25 ((Debian))
Service Info: OSs: Unix, Linux; CPE: cpe:/o:linux:linux_kernel
Read data files from: /usr/bin/../share/nmap
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sat Jan 21 07:15:17 2023 -- 1 IP address (1 host up) scanned in 44.89 seconds

80
HTB/admirer/results/admirer.htb/scans/_manual_commands.txt Normal file
View File

@@ -0,0 +1,80 @@
[*] ftp on tcp/21
[-] Bruteforce logins:
hydra -L "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e nsr -s 21 -o "/home/simon/htb/admirer/results/admirer.htb/scans/tcp21/tcp_21_ftp_hydra.txt" ftp://admirer.htb
medusa -U "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e ns -n 21 -O "/home/simon/htb/admirer/results/admirer.htb/scans/tcp21/tcp_21_ftp_medusa.txt" -M ftp -h admirer.htb
[*] ssh on tcp/22
[-] Bruteforce logins:
hydra -L "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e nsr -s 22 -o "/home/simon/htb/admirer/results/admirer.htb/scans/tcp22/tcp_22_ssh_hydra.txt" ssh://admirer.htb
medusa -U "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e ns -n 22 -O "/home/simon/htb/admirer/results/admirer.htb/scans/tcp22/tcp_22_ssh_medusa.txt" -M ssh -h admirer.htb
[*] http on tcp/80
[-] (feroxbuster) Multi-threaded recursive directory/file enumeration for web servers using various wordlists:
feroxbuster -u http://admirer.htb:80 -t 200 -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -x "txt,html,php,asp,aspx,jsp" -v -k -e -o /home/simon/htb/admirer/results/admirer.htb/scans/tcp80/tcp_80_http_feroxbuster_dirbuster.txt
[-] Credential bruteforcing commands (don't run these without modifying them):
hydra -L "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e nsr -s 80 -o "/home/simon/htb/admirer/results/admirer.htb/scans/tcp80/tcp_80_http_auth_hydra.txt" http-get://admirer.htb/path/to/auth/area
medusa -U "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e ns -n 80 -O "/home/simon/htb/admirer/results/admirer.htb/scans/tcp80/tcp_80_http_auth_medusa.txt" -M http -h admirer.htb -m DIR:/path/to/auth/area
hydra -L "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e nsr -s 80 -o "/home/simon/htb/admirer/results/admirer.htb/scans/tcp80/tcp_80_http_form_hydra.txt" http-post-form://admirer.htb/path/to/login.php:"username=^USER^&password=^PASS^":"invalid-login-message"
medusa -U "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e ns -n 80 -O "/home/simon/htb/admirer/results/admirer.htb/scans/tcp80/tcp_80_http_form_medusa.txt" -M web-form -h admirer.htb -m FORM:/path/to/login.php -m FORM-DATA:"post?username=&password=" -m DENY-SIGNAL:"invalid login message"
[-] (nikto) old but generally reliable web server enumeration tool:
nikto -ask=no -h http://admirer.htb:80 2>&1 | tee "/home/simon/htb/admirer/results/admirer.htb/scans/tcp80/tcp_80_http_nikto.txt"
[-] (wpscan) WordPress Security Scanner (useful if WordPress is found):
wpscan --url http://admirer.htb:80/ --no-update -e vp,vt,tt,cb,dbe,u,m --plugins-detection aggressive --plugins-version-detection aggressive -f cli-no-color 2>&1 | tee "/home/simon/htb/admirer/results/admirer.htb/scans/tcp80/tcp_80_http_wpscan.txt"
[*] ftp on tcp/21
[-] Bruteforce logins:
hydra -L "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e nsr -s 21 -o "/home/simon/htb/admirer/results/admirer.htb/scans/tcp21/tcp_21_ftp_hydra.txt" ftp://admirer.htb
medusa -U "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e ns -n 21 -O "/home/simon/htb/admirer/results/admirer.htb/scans/tcp21/tcp_21_ftp_medusa.txt" -M ftp -h admirer.htb
[*] ssh on tcp/22
[-] Bruteforce logins:
hydra -L "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e nsr -s 22 -o "/home/simon/htb/admirer/results/admirer.htb/scans/tcp22/tcp_22_ssh_hydra.txt" ssh://admirer.htb
medusa -U "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e ns -n 22 -O "/home/simon/htb/admirer/results/admirer.htb/scans/tcp22/tcp_22_ssh_medusa.txt" -M ssh -h admirer.htb
[*] http on tcp/80
[-] (feroxbuster) Multi-threaded recursive directory/file enumeration for web servers using various wordlists:
feroxbuster -u http://admirer.htb:80 -t 200 -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -x "txt,html,php,asp,aspx,jsp" -v -k -e -o /home/simon/htb/admirer/results/admirer.htb/scans/tcp80/tcp_80_http_feroxbuster_dirbuster.txt
[-] Credential bruteforcing commands (don't run these without modifying them):
hydra -L "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e nsr -s 80 -o "/home/simon/htb/admirer/results/admirer.htb/scans/tcp80/tcp_80_http_auth_hydra.txt" http-get://admirer.htb/path/to/auth/area
medusa -U "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e ns -n 80 -O "/home/simon/htb/admirer/results/admirer.htb/scans/tcp80/tcp_80_http_auth_medusa.txt" -M http -h admirer.htb -m DIR:/path/to/auth/area
hydra -L "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e nsr -s 80 -o "/home/simon/htb/admirer/results/admirer.htb/scans/tcp80/tcp_80_http_form_hydra.txt" http-post-form://admirer.htb/path/to/login.php:"username=^USER^&password=^PASS^":"invalid-login-message"
medusa -U "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e ns -n 80 -O "/home/simon/htb/admirer/results/admirer.htb/scans/tcp80/tcp_80_http_form_medusa.txt" -M web-form -h admirer.htb -m FORM:/path/to/login.php -m FORM-DATA:"post?username=&password=" -m DENY-SIGNAL:"invalid login message"
[-] (nikto) old but generally reliable web server enumeration tool:
nikto -ask=no -h http://admirer.htb:80 2>&1 | tee "/home/simon/htb/admirer/results/admirer.htb/scans/tcp80/tcp_80_http_nikto.txt"
[-] (wpscan) WordPress Security Scanner (useful if WordPress is found):
wpscan --url http://admirer.htb:80/ --no-update -e vp,vt,tt,cb,dbe,u,m --plugins-detection aggressive --plugins-version-detection aggressive -f cli-no-color 2>&1 | tee "/home/simon/htb/admirer/results/admirer.htb/scans/tcp80/tcp_80_http_wpscan.txt"

27
HTB/admirer/results/admirer.htb/scans/_quick_tcp_nmap.txt Normal file
View File

@@ -0,0 +1,27 @@
# Nmap 7.93 scan initiated Sat Jan 21 07:14:33 2023 as: nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN /home/simon/htb/admirer/results/admirer.htb/scans/_quick_tcp_nmap.txt -oX /home/simon/htb/admirer/results/admirer.htb/scans/xml/_quick_tcp_nmap.xml admirer.htb
Nmap scan report for admirer.htb (10.129.228.103)
Host is up, received user-set (0.026s latency).
Scanned at 2023-01-21 07:14:33 UTC for 9s
Not shown: 997 closed tcp ports (conn-refused)
PORT STATE SERVICE REASON VERSION
21/tcp open ftp syn-ack vsftpd 3.0.3
22/tcp open ssh syn-ack OpenSSH 7.4p1 Debian 10+deb9u7 (protocol 2.0)
| ssh-hostkey:
| 2048 4a71e92163699dcbdd84021a2397e1b9 (RSA)
| ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDaQHjxkc8zeXPgI5C7066uFJaB6EjvTGDEwbfl0cwM95npP9G8icv1F/YQgKxqqcGzl+pVaAybRnQxiZkrZHbnJlMzUzNTxxI5cy+7W0dRZN4VH4YjkXFrZRw6dx/5L1wP4qLtdQ0tLHmgzwJZO+111mrAGXMt0G+SCnQ30U7vp95EtIC0gbiGDx0dDVgMeg43+LkzWG+Nj+mQ5KCQBjDLFaZXwCp5Pqfrpf3AmERjoFHIE8Df4QO3lKT9Ov1HWcnfFuqSH/pl5+m83ecQGS1uxAaokNfn9Nkg12dZP1JSk+Tt28VrpOZDKhVvAQhXWONMTyuRJmVg/hnrSfxTwbM9
| 256 c595b6214d46a425557a873e19a8e702 (ECDSA)
| ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBNHgxoAB6NHTQnBo+/MqdfMsEet9jVzP94okTOAWWMpWkWkT+X4EEWRzlxZKwb/dnt99LS8WNZkR0P9HQxMcIII=
| 256 d02dddd05c42f87b315abe57c4a9a756 (ED25519)
|_ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBqp21lADoWZ+184z0m9zCpORbmmngq+h498H9JVf7kP
80/tcp open http syn-ack Apache httpd 2.4.25 ((Debian))
|_http-title: Admirer
| http-robots.txt: 1 disallowed entry
|_/admin-dir
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_http-server-header: Apache/2.4.25 (Debian)
Service Info: OSs: Unix, Linux; CPE: cpe:/o:linux:linux_kernel
Read data files from: /usr/bin/../share/nmap
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sat Jan 21 07:14:43 2023 -- 1 IP address (1 host up) scanned in 9.94 seconds

13
HTB/admirer/results/admirer.htb/scans/tcp21/tcp_21_ftp_nmap.txt Normal file
View File

@@ -0,0 +1,13 @@
# Nmap 7.93 scan initiated Sat Jan 21 07:14:43 2023 as: nmap -vv --reason -Pn -T4 -sV -p 21 "--script=banner,(ftp* or ssl*) and not (brute or broadcast or dos or external or fuzzer)" -oN /home/simon/htb/admirer/results/admirer.htb/scans/tcp21/tcp_21_ftp_nmap.txt -oX /home/simon/htb/admirer/results/admirer.htb/scans/tcp21/xml/tcp_21_ftp_nmap.xml admirer.htb
Nmap scan report for admirer.htb (10.129.228.103)
Host is up, received user-set (0.17s latency).
Scanned at 2023-01-21 07:14:44 UTC for 2s
PORT STATE SERVICE REASON VERSION
21/tcp open ftp syn-ack vsftpd 3.0.3
|_banner: 220 (vsFTPd 3.0.3)
Service Info: OS: Unix
Read data files from: /usr/bin/../share/nmap
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sat Jan 21 07:14:46 2023 -- 1 IP address (1 host up) scanned in 3.21 seconds

43
HTB/admirer/results/admirer.htb/scans/tcp21/xml/tcp_21_ftp_nmap.xml Normal file
View File

@@ -0,0 +1,43 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE nmaprun>
<?xml-stylesheet href="file:///usr/bin/../share/nmap/nmap.xsl" type="text/xsl"?>
<!-- Nmap 7.93 scan initiated Sat Jan 21 07:14:43 2023 as: nmap -vv -&#45;reason -Pn -T4 -sV -p 21 &quot;-&#45;script=banner,(ftp* or ssl*) and not (brute or broadcast or dos or external or fuzzer)&quot; -oN /home/simon/htb/admirer/results/admirer.htb/scans/tcp21/tcp_21_ftp_nmap.txt -oX /home/simon/htb/admirer/results/admirer.htb/scans/tcp21/xml/tcp_21_ftp_nmap.xml admirer.htb -->
<nmaprun scanner="nmap" args="nmap -vv -&#45;reason -Pn -T4 -sV -p 21 &quot;-&#45;script=banner,(ftp* or ssl*) and not (brute or broadcast or dos or external or fuzzer)&quot; -oN /home/simon/htb/admirer/results/admirer.htb/scans/tcp21/tcp_21_ftp_nmap.txt -oX /home/simon/htb/admirer/results/admirer.htb/scans/tcp21/xml/tcp_21_ftp_nmap.xml admirer.htb" start="1674285283" startstr="Sat Jan 21 07:14:43 2023" version="7.93" xmloutputversion="1.05">
<scaninfo type="connect" protocol="tcp" numservices="1" services="21"/>
<verbose level="2"/>
<debugging level="0"/>
<taskbegin task="NSE" time="1674285284"/>
<taskend task="NSE" time="1674285284"/>
<taskbegin task="NSE" time="1674285284"/>
<taskend task="NSE" time="1674285284"/>
<taskbegin task="NSE" time="1674285284"/>
<taskend task="NSE" time="1674285284"/>
<taskbegin task="Connect Scan" time="1674285284"/>
<taskend task="Connect Scan" time="1674285284" extrainfo="1 total ports"/>
<taskbegin task="Service scan" time="1674285285"/>
<taskend task="Service scan" time="1674285285" extrainfo="1 service on 1 host"/>
<taskbegin task="NSE" time="1674285285"/>
<taskend task="NSE" time="1674285286"/>
<taskbegin task="NSE" time="1674285286"/>
<taskend task="NSE" time="1674285286"/>
<taskbegin task="NSE" time="1674285286"/>
<taskend task="NSE" time="1674285286"/>
<host starttime="1674285284" endtime="1674285286"><status state="up" reason="user-set" reason_ttl="0"/>
<address addr="10.129.228.103" addrtype="ipv4"/>
<hostnames>
<hostname name="admirer.htb" type="user"/>
<hostname name="admirer.htb" type="PTR"/>
</hostnames>
<ports><port protocol="tcp" portid="21"><state state="open" reason="syn-ack" reason_ttl="0"/><service name="ftp" product="vsftpd" version="3.0.3" ostype="Unix" method="probed" conf="10"><cpe>cpe:/a:vsftpd:vsftpd:3.0.3</cpe></service><script id="banner" output="220 (vsFTPd 3.0.3)"/></port>
</ports>
<times srtt="173102" rttvar="173102" to="865510"/>
</host>
<taskbegin task="NSE" time="1674285286"/>
<taskend task="NSE" time="1674285286"/>
<taskbegin task="NSE" time="1674285286"/>
<taskend task="NSE" time="1674285286"/>
<taskbegin task="NSE" time="1674285286"/>
<taskend task="NSE" time="1674285286"/>
<runstats><finished time="1674285286" timestr="Sat Jan 21 07:14:46 2023" summary="Nmap done at Sat Jan 21 07:14:46 2023; 1 IP address (1 host up) scanned in 3.21 seconds" elapsed="3.21" exit="success"/><hosts up="1" down="0" total="1"/>
</runstats>
</nmaprun>

63
HTB/admirer/results/admirer.htb/scans/tcp22/tcp_22_ssh_nmap.txt Normal file
View File

@@ -0,0 +1,63 @@
# Nmap 7.93 scan initiated Sat Jan 21 07:14:43 2023 as: nmap -vv --reason -Pn -T4 -sV -p 22 --script=banner,ssh2-enum-algos,ssh-hostkey,ssh-auth-methods -oN /home/simon/htb/admirer/results/admirer.htb/scans/tcp22/tcp_22_ssh_nmap.txt -oX /home/simon/htb/admirer/results/admirer.htb/scans/tcp22/xml/tcp_22_ssh_nmap.xml admirer.htb
Nmap scan report for admirer.htb (10.129.228.103)
Host is up, received user-set (0.18s latency).
Scanned at 2023-01-21 07:14:44 UTC for 2s
PORT STATE SERVICE REASON VERSION
22/tcp open ssh syn-ack OpenSSH 7.4p1 Debian 10+deb9u7 (protocol 2.0)
| ssh2-enum-algos:
| kex_algorithms: (10)
| curve25519-sha256
| curve25519-sha256@libssh.org
| ecdh-sha2-nistp256
| ecdh-sha2-nistp384
| ecdh-sha2-nistp521
| diffie-hellman-group-exchange-sha256
| diffie-hellman-group16-sha512
| diffie-hellman-group18-sha512
| diffie-hellman-group14-sha256
| diffie-hellman-group14-sha1
| server_host_key_algorithms: (5)
| ssh-rsa
| rsa-sha2-512
| rsa-sha2-256
| ecdsa-sha2-nistp256
| ssh-ed25519
| encryption_algorithms: (6)
| chacha20-poly1305@openssh.com
| aes128-ctr
| aes192-ctr
| aes256-ctr
| aes128-gcm@openssh.com
| aes256-gcm@openssh.com
| mac_algorithms: (10)
| umac-64-etm@openssh.com
| umac-128-etm@openssh.com
| hmac-sha2-256-etm@openssh.com
| hmac-sha2-512-etm@openssh.com
| hmac-sha1-etm@openssh.com
| umac-64@openssh.com
| umac-128@openssh.com
| hmac-sha2-256
| hmac-sha2-512
| hmac-sha1
| compression_algorithms: (2)
| none
|_ zlib@openssh.com
| ssh-hostkey:
| 2048 4a71e92163699dcbdd84021a2397e1b9 (RSA)
| ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDaQHjxkc8zeXPgI5C7066uFJaB6EjvTGDEwbfl0cwM95npP9G8icv1F/YQgKxqqcGzl+pVaAybRnQxiZkrZHbnJlMzUzNTxxI5cy+7W0dRZN4VH4YjkXFrZRw6dx/5L1wP4qLtdQ0tLHmgzwJZO+111mrAGXMt0G+SCnQ30U7vp95EtIC0gbiGDx0dDVgMeg43+LkzWG+Nj+mQ5KCQBjDLFaZXwCp5Pqfrpf3AmERjoFHIE8Df4QO3lKT9Ov1HWcnfFuqSH/pl5+m83ecQGS1uxAaokNfn9Nkg12dZP1JSk+Tt28VrpOZDKhVvAQhXWONMTyuRJmVg/hnrSfxTwbM9
| 256 c595b6214d46a425557a873e19a8e702 (ECDSA)
| ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBNHgxoAB6NHTQnBo+/MqdfMsEet9jVzP94okTOAWWMpWkWkT+X4EEWRzlxZKwb/dnt99LS8WNZkR0P9HQxMcIII=
| 256 d02dddd05c42f87b315abe57c4a9a756 (ED25519)
|_ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBqp21lADoWZ+184z0m9zCpORbmmngq+h498H9JVf7kP
| ssh-auth-methods:
| Supported authentication methods:
| publickey
|_ password
|_banner: SSH-2.0-OpenSSH_7.4p1 Debian-10+deb9u7
Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel
Read data files from: /usr/bin/../share/nmap
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sat Jan 21 07:14:46 2023 -- 1 IP address (1 host up) scanned in 2.86 seconds

102
HTB/admirer/results/admirer.htb/scans/tcp22/xml/tcp_22_ssh_nmap.xml Normal file
View File

@@ -0,0 +1,102 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE nmaprun>
<?xml-stylesheet href="file:///usr/bin/../share/nmap/nmap.xsl" type="text/xsl"?>
<!-- Nmap 7.93 scan initiated Sat Jan 21 07:14:43 2023 as: nmap -vv -&#45;reason -Pn -T4 -sV -p 22 -&#45;script=banner,ssh2-enum-algos,ssh-hostkey,ssh-auth-methods -oN /home/simon/htb/admirer/results/admirer.htb/scans/tcp22/tcp_22_ssh_nmap.txt -oX /home/simon/htb/admirer/results/admirer.htb/scans/tcp22/xml/tcp_22_ssh_nmap.xml admirer.htb -->
<nmaprun scanner="nmap" args="nmap -vv -&#45;reason -Pn -T4 -sV -p 22 -&#45;script=banner,ssh2-enum-algos,ssh-hostkey,ssh-auth-methods -oN /home/simon/htb/admirer/results/admirer.htb/scans/tcp22/tcp_22_ssh_nmap.txt -oX /home/simon/htb/admirer/results/admirer.htb/scans/tcp22/xml/tcp_22_ssh_nmap.xml admirer.htb" start="1674285283" startstr="Sat Jan 21 07:14:43 2023" version="7.93" xmloutputversion="1.05">
<scaninfo type="connect" protocol="tcp" numservices="1" services="22"/>
<verbose level="2"/>
<debugging level="0"/>
<taskbegin task="NSE" time="1674285284"/>
<taskend task="NSE" time="1674285284"/>
<taskbegin task="NSE" time="1674285284"/>
<taskend task="NSE" time="1674285284"/>
<taskbegin task="Connect Scan" time="1674285284"/>
<taskend task="Connect Scan" time="1674285284" extrainfo="1 total ports"/>
<taskbegin task="Service scan" time="1674285285"/>
<taskend task="Service scan" time="1674285285" extrainfo="1 service on 1 host"/>
<taskbegin task="NSE" time="1674285285"/>
<taskend task="NSE" time="1674285286"/>
<taskbegin task="NSE" time="1674285286"/>
<taskend task="NSE" time="1674285286"/>
<host starttime="1674285284" endtime="1674285286"><status state="up" reason="user-set" reason_ttl="0"/>
<address addr="10.129.228.103" addrtype="ipv4"/>
<hostnames>
<hostname name="admirer.htb" type="user"/>
<hostname name="admirer.htb" type="PTR"/>
</hostnames>
<ports><port protocol="tcp" portid="22"><state state="open" reason="syn-ack" reason_ttl="0"/><service name="ssh" product="OpenSSH" version="7.4p1 Debian 10+deb9u7" extrainfo="protocol 2.0" ostype="Linux" method="probed" conf="10"><cpe>cpe:/a:openbsd:openssh:7.4p1</cpe><cpe>cpe:/o:linux:linux_kernel</cpe></service><script id="ssh2-enum-algos" output="&#xa; kex_algorithms: (10)&#xa; curve25519-sha256&#xa; curve25519-sha256@libssh.org&#xa; ecdh-sha2-nistp256&#xa; ecdh-sha2-nistp384&#xa; ecdh-sha2-nistp521&#xa; diffie-hellman-group-exchange-sha256&#xa; diffie-hellman-group16-sha512&#xa; diffie-hellman-group18-sha512&#xa; diffie-hellman-group14-sha256&#xa; diffie-hellman-group14-sha1&#xa; server_host_key_algorithms: (5)&#xa; ssh-rsa&#xa; rsa-sha2-512&#xa; rsa-sha2-256&#xa; ecdsa-sha2-nistp256&#xa; ssh-ed25519&#xa; encryption_algorithms: (6)&#xa; chacha20-poly1305@openssh.com&#xa; aes128-ctr&#xa; aes192-ctr&#xa; aes256-ctr&#xa; aes128-gcm@openssh.com&#xa; aes256-gcm@openssh.com&#xa; mac_algorithms: (10)&#xa; umac-64-etm@openssh.com&#xa; umac-128-etm@openssh.com&#xa; hmac-sha2-256-etm@openssh.com&#xa; hmac-sha2-512-etm@openssh.com&#xa; hmac-sha1-etm@openssh.com&#xa; umac-64@openssh.com&#xa; umac-128@openssh.com&#xa; hmac-sha2-256&#xa; hmac-sha2-512&#xa; hmac-sha1&#xa; compression_algorithms: (2)&#xa; none&#xa; zlib@openssh.com"><table key="kex_algorithms">
<elem>curve25519-sha256</elem>
<elem>curve25519-sha256@libssh.org</elem>
<elem>ecdh-sha2-nistp256</elem>
<elem>ecdh-sha2-nistp384</elem>
<elem>ecdh-sha2-nistp521</elem>
<elem>diffie-hellman-group-exchange-sha256</elem>
<elem>diffie-hellman-group16-sha512</elem>
<elem>diffie-hellman-group18-sha512</elem>
<elem>diffie-hellman-group14-sha256</elem>
<elem>diffie-hellman-group14-sha1</elem>
</table>
<table key="server_host_key_algorithms">
<elem>ssh-rsa</elem>
<elem>rsa-sha2-512</elem>
<elem>rsa-sha2-256</elem>
<elem>ecdsa-sha2-nistp256</elem>
<elem>ssh-ed25519</elem>
</table>
<table key="encryption_algorithms">
<elem>chacha20-poly1305@openssh.com</elem>
<elem>aes128-ctr</elem>
<elem>aes192-ctr</elem>
<elem>aes256-ctr</elem>
<elem>aes128-gcm@openssh.com</elem>
<elem>aes256-gcm@openssh.com</elem>
</table>
<table key="mac_algorithms">
<elem>umac-64-etm@openssh.com</elem>
<elem>umac-128-etm@openssh.com</elem>
<elem>hmac-sha2-256-etm@openssh.com</elem>
<elem>hmac-sha2-512-etm@openssh.com</elem>
<elem>hmac-sha1-etm@openssh.com</elem>
<elem>umac-64@openssh.com</elem>
<elem>umac-128@openssh.com</elem>
<elem>hmac-sha2-256</elem>
<elem>hmac-sha2-512</elem>
<elem>hmac-sha1</elem>
</table>
<table key="compression_algorithms">
<elem>none</elem>
<elem>zlib@openssh.com</elem>
</table>
</script><script id="ssh-hostkey" output="&#xa; 2048 4a71e92163699dcbdd84021a2397e1b9 (RSA)&#xa;ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDaQHjxkc8zeXPgI5C7066uFJaB6EjvTGDEwbfl0cwM95npP9G8icv1F/YQgKxqqcGzl+pVaAybRnQxiZkrZHbnJlMzUzNTxxI5cy+7W0dRZN4VH4YjkXFrZRw6dx/5L1wP4qLtdQ0tLHmgzwJZO+111mrAGXMt0G+SCnQ30U7vp95EtIC0gbiGDx0dDVgMeg43+LkzWG+Nj+mQ5KCQBjDLFaZXwCp5Pqfrpf3AmERjoFHIE8Df4QO3lKT9Ov1HWcnfFuqSH/pl5+m83ecQGS1uxAaokNfn9Nkg12dZP1JSk+Tt28VrpOZDKhVvAQhXWONMTyuRJmVg/hnrSfxTwbM9&#xa; 256 c595b6214d46a425557a873e19a8e702 (ECDSA)&#xa;ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBNHgxoAB6NHTQnBo+/MqdfMsEet9jVzP94okTOAWWMpWkWkT+X4EEWRzlxZKwb/dnt99LS8WNZkR0P9HQxMcIII=&#xa; 256 d02dddd05c42f87b315abe57c4a9a756 (ED25519)&#xa;ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBqp21lADoWZ+184z0m9zCpORbmmngq+h498H9JVf7kP"><table>
<elem key="key">AAAAB3NzaC1yc2EAAAADAQABAAABAQDaQHjxkc8zeXPgI5C7066uFJaB6EjvTGDEwbfl0cwM95npP9G8icv1F/YQgKxqqcGzl+pVaAybRnQxiZkrZHbnJlMzUzNTxxI5cy+7W0dRZN4VH4YjkXFrZRw6dx/5L1wP4qLtdQ0tLHmgzwJZO+111mrAGXMt0G+SCnQ30U7vp95EtIC0gbiGDx0dDVgMeg43+LkzWG+Nj+mQ5KCQBjDLFaZXwCp5Pqfrpf3AmERjoFHIE8Df4QO3lKT9Ov1HWcnfFuqSH/pl5+m83ecQGS1uxAaokNfn9Nkg12dZP1JSk+Tt28VrpOZDKhVvAQhXWONMTyuRJmVg/hnrSfxTwbM9</elem>
<elem key="fingerprint">4a71e92163699dcbdd84021a2397e1b9</elem>
<elem key="type">ssh-rsa</elem>
<elem key="bits">2048</elem>
</table>
<table>
<elem key="key">AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBNHgxoAB6NHTQnBo+/MqdfMsEet9jVzP94okTOAWWMpWkWkT+X4EEWRzlxZKwb/dnt99LS8WNZkR0P9HQxMcIII=</elem>
<elem key="fingerprint">c595b6214d46a425557a873e19a8e702</elem>
<elem key="type">ecdsa-sha2-nistp256</elem>
<elem key="bits">256</elem>
</table>
<table>
<elem key="key">AAAAC3NzaC1lZDI1NTE5AAAAIBqp21lADoWZ+184z0m9zCpORbmmngq+h498H9JVf7kP</elem>
<elem key="fingerprint">d02dddd05c42f87b315abe57c4a9a756</elem>
<elem key="type">ssh-ed25519</elem>
<elem key="bits">256</elem>
</table>
</script><script id="ssh-auth-methods" output="&#xa; Supported authentication methods: &#xa; publickey&#xa; password"><table key="Supported authentication methods">
<elem>publickey</elem>
<elem>password</elem>
</table>
</script><script id="banner" output="SSH-2.0-OpenSSH_7.4p1 Debian-10+deb9u7"/></port>
</ports>
<times srtt="182153" rttvar="182153" to="910765"/>
</host>
<taskbegin task="NSE" time="1674285286"/>
<taskend task="NSE" time="1674285286"/>
<taskbegin task="NSE" time="1674285286"/>
<taskend task="NSE" time="1674285286"/>
<runstats><finished time="1674285286" timestr="Sat Jan 21 07:14:46 2023" summary="Nmap done at Sat Jan 21 07:14:46 2023; 1 IP address (1 host up) scanned in 2.86 seconds" elapsed="2.86" exit="success"/><hosts up="1" down="0" total="1"/>
</runstats>
</nmaprun>

0
HTB/admirer/results/admirer.htb/scans/tcp80/tcp_80_http_admirer.htb_vhosts_subdomains-top1million-110000.txt Normal file
View File

14
HTB/admirer/results/admirer.htb/scans/tcp80/tcp_80_http_curl-robots.txt Normal file
View File

@@ -0,0 +1,14 @@
HTTP/1.1 200 OK
Date: Sat, 21 Jan 2023 07:14:44 GMT
Server: Apache/2.4.25 (Debian)
Last-Modified: Wed, 29 Apr 2020 09:22:10 GMT
ETag: "8a-5a46a7b96e300"
Accept-Ranges: bytes
Content-Length: 138
Vary: Accept-Encoding
Content-Type: text/plain
User-agent: *
# This folder contains personal contacts and creds, so no one -not even robots- should see it - waldo
Disallow: /admin-dir

161
HTB/admirer/results/admirer.htb/scans/tcp80/tcp_80_http_curl.html Normal file
View File

@@ -0,0 +1,161 @@
HTTP/1.1 200 OK
Date: Sat, 21 Jan 2023 07:14:44 GMT
Server: Apache/2.4.25 (Debian)
Vary: Accept-Encoding
Content-Length: 6051
Content-Type: text/html; charset=UTF-8
<!DOCTYPE HTML>
<!--
Multiverse by HTML5 UP
html5up.net | @ajlkn
Free for personal and commercial use under the CCA 3.0 license (html5up.net/license)
-->
<html>
<head>
<title>Admirer</title>
<meta charset="utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1, user-scalable=no" />
<link rel="stylesheet" href="assets/css/main.css" />
<noscript><link rel="stylesheet" href="assets/css/noscript.css" /></noscript>
</head>
<body class="is-preload">
<!-- Wrapper -->
<div id="wrapper">
<!-- Header -->
<header id="header">
<h1><a href="index.html"><strong>Admirer</strong> of skills and visuals</a></h1>
<nav>
<ul>
<li><a href="#footer" class="icon solid fa-info-circle">About</a></li>
</ul>
</nav>
</header>
<!-- Main -->
<div id="main">
<article class='thumb'>
<a href='images/fulls/art01.jpg' class='image'><img src='images/thumbs/thmb_art01.jpg' alt='' /></a>
<h2>Visual Art</h2>
<p>A pure showcase of skill and emotion.</p>
</article>
<article class='thumb'>
<a href='images/fulls/eng02.jpg' class='image'><img src='images/thumbs/thmb_eng02.jpg' alt='' /></a>
<h2>The Beauty and the Beast</h2>
<p>Besides the technology, there is also the eye candy...</p>
</article>
<article class='thumb'>
<a href='images/fulls/nat01.jpg' class='image'><img src='images/thumbs/thmb_nat01.jpg' alt='' /></a>
<h2>The uncontrollable lightshow</h2>
<p>When the sun decides to play at night.</p>
</article>
<article class='thumb'>
<a href='images/fulls/arch02.jpg' class='image'><img src='images/thumbs/thmb_arch02.jpg' alt='' /></a>
<h2>Nearly Monochromatic</h2>
<p>One could simply spend hours looking at this indoor square.</p>
</article>
<article class='thumb'>
<a href='images/fulls/mind01.jpg' class='image'><img src='images/thumbs/thmb_mind01.jpg' alt='' /></a>
<h2>Way ahead of his time</h2>
<p>You probably still use some of his inventions... 500yrs later.</p>
</article>
<article class='thumb'>
<a href='images/fulls/mus02.jpg' class='image'><img src='images/thumbs/thmb_mus02.jpg' alt='' /></a>
<h2>The outcomes of complexity</h2>
<p>Seriously, listen to Dust in Interstellar's OST. Thank me later.</p>
</article>
<article class='thumb'>
<a href='images/fulls/arch01.jpg' class='image'><img src='images/thumbs/thmb_arch01.jpg' alt='' /></a>
<h2>Back to basics</h2>
<p>And centuries later, we want to go back and live in nature... Sort of.</p>
</article>
<article class='thumb'>
<a href='images/fulls/mind02.jpg' class='image'><img src='images/thumbs/thmb_mind02.jpg' alt='' /></a>
<h2>We need him back</h2>
<p>He might have been a loner who allegedly slept with a pigeon, but that brain...</p>
</article>
<article class='thumb'>
<a href='images/fulls/eng01.jpg' class='image'><img src='images/thumbs/thmb_eng01.jpg' alt='' /></a>
<h2>In the name of Science</h2>
<p>Some theories need to be proven.</p>
</article>
<article class='thumb'>
<a href='images/fulls/mus01.jpg' class='image'><img src='images/thumbs/thmb_mus01.jpg' alt='' /></a>
<h2>Equal Temperament</h2>
<p>Because without him, music would not exist (as we know it today).</p>
</article>
<article class='thumb'>
<a href='images/fulls/nat02.jpg' class='image'><img src='images/thumbs/thmb_nat02.jpg' alt='' /></a>
<h2>Playful wind and water</h2>
<p>A colourful wave in the middle of the desert... Isn't Nature amazing?</p>
</article>
<article class='thumb'>
<a href='images/fulls/art02.jpg' class='image'><img src='images/thumbs/thmb_art02.jpg' alt='' /></a>
<h2>Attitude</h2>
<p>Art can provoke feelings... or convey powerful messages</p>
</article>
</div>
<!-- Footer -->
<footer id="footer" class="panel">
<div class="inner split">
<div>
<section>
<h2>Allow yourself to be amazed</h2>
<p>Skills are not to be envied, but to feel inspired by.<br>
Visual arts and music are there to take care of your soul.<br><br>
Let your senses soak up these wonders...<br><br><br><br>
</p>
</section>
<section>
<h2>Follow me on ...</h2>
<ul class="icons">
<li><a href="#" class="icon brands fa-twitter"><span class="label">Twitter</span></a></li>
<li><a href="#" class="icon brands fa-facebook-f"><span class="label">Facebook</span></a></li>
<li><a href="#" class="icon brands fa-instagram"><span class="label">Instagram</span></a></li>
<li><a href="#" class="icon brands fa-github"><span class="label">GitHub</span></a></li>
<li><a href="#" class="icon brands fa-dribbble"><span class="label">Dribbble</span></a></li>
<li><a href="#" class="icon brands fa-linkedin-in"><span class="label">LinkedIn</span></a></li>
</ul>
</section>
</div>
<div>
<section>
<h2>Get in touch</h2>
<form method="post" action="#"><!-- Still under development... This does not send anything yet, but it looks nice! -->
<div class="fields">
<div class="field half">
<input type="text" name="name" id="name" placeholder="Name" />
</div>
<div class="field half">
<input type="text" name="email" id="email" placeholder="Email" />
</div>
<div class="field">
<textarea name="message" id="message" rows="4" placeholder="Message"></textarea>
</div>
</div>
<ul class="actions">
<li><input type="submit" value="Send" class="primary" /></li>
<li><input type="reset" value="Reset" /></li>
</ul>
</form>
</section>
</div>
</div>
</footer>
</div>
<!-- Scripts -->
<script src="assets/js/jquery.min.js"></script>
<script src="assets/js/jquery.poptrox.min.js"></script>
<script src="assets/js/browser.min.js"></script>
<script src="assets/js/breakpoints.min.js"></script>
<script src="assets/js/util.js"></script>
<script src="assets/js/main.js"></script>
</body>
</html>

102
HTB/admirer/results/admirer.htb/scans/tcp80/tcp_80_http_feroxbuster_directory-list-2.3-medium.txt Normal file
View File

@@ -0,0 +1,102 @@
301 GET 9l 28w 314c http://admirer.htb/admin-dir => http://admirer.htb/admin-dir/
301 GET 9l 28w 311c http://admirer.htb/images => http://admirer.htb/images/
200 GET 128l 808w 42049c http://admirer.htb/images/thumbs/thmb_eng02.jpg
200 GET 181l 1429w 79221c http://admirer.htb/images/thumbs/thmb_art01.jpg
200 GET 440l 2890w 146980c http://admirer.htb/images/fulls/art01.jpg
200 GET 1154l 5907w 292305c http://admirer.htb/images/fulls/mus01.jpg
200 GET 587l 1232w 12433c http://admirer.htb/assets/js/util.js
403 GET 9l 28w 276c http://admirer.htb/.html
403 GET 9l 28w 276c http://admirer.htb/.php
200 GET 281l 1437w 60663c http://admirer.htb/images/thumbs/thmb_mus01.jpg
403 GET 9l 28w 276c http://admirer.htb/images/fulls/
301 GET 9l 28w 311c http://admirer.htb/assets => http://admirer.htb/assets/
403 GET 9l 28w 276c http://admirer.htb/images/fulls/.html
403 GET 9l 28w 276c http://admirer.htb/images/fulls/.php
200 GET 29l 39w 350c http://admirer.htb/admin-dir/contacts.txt
301 GET 9l 28w 318c http://admirer.htb/images/thumbs => http://admirer.htb/images/thumbs/
403 GET 9l 28w 276c http://admirer.htb/images/.html
403 GET 9l 28w 276c http://admirer.htb/images/.php
200 GET 173l 1521w 87151c http://admirer.htb/images/thumbs/thmb_mus02.jpg
200 GET 241l 2097w 117848c http://admirer.htb/images/thumbs/thmb_arch01.jpg
200 GET 2050l 4273w 44147c http://admirer.htb/assets/css/main.css
200 GET 2l 87w 2439c http://admirer.htb/assets/js/breakpoints.min.js
200 GET 240l 2194w 120238c http://admirer.htb/images/thumbs/thmb_nat02.jpg
200 GET 230l 1300w 58053c http://admirer.htb/images/thumbs/thmb_mind02.jpg
200 GET 1300l 5571w 262596c http://admirer.htb/images/fulls/nat01.jpg
200 GET 409l 2427w 91128c http://admirer.htb/images/fulls/mind02.jpg
200 GET 876l 4293w 193360c http://admirer.htb/images/fulls/arch01.jpg
200 GET 204l 1299w 61571c http://admirer.htb/images/thumbs/thmb_art02.jpg
200 GET 1435l 11709w 637125c http://admirer.htb/images/fulls/mind01.jpg
301 GET 9l 28w 314c http://admirer.htb/assets/js => http://admirer.htb/assets/js/
200 GET 281l 537w 6107c http://admirer.htb/assets/js/main.js
200 GET 195l 1798w 100866c http://admirer.htb/images/thumbs/thmb_eng01.jpg
403 GET 9l 28w 276c http://admirer.htb/assets/.html
403 GET 9l 28w 276c http://admirer.htb/assets/.php
200 GET 582l 4456w 294837c http://admirer.htb/images/fulls/mus02.jpg
200 GET 674l 2692w 133131c http://admirer.htb/images/fulls/arch02.jpg
200 GET 153l 529w 6051c http://admirer.htb/
301 GET 9l 28w 315c http://admirer.htb/assets/css => http://admirer.htb/assets/css/
301 GET 9l 28w 314c http://admirer.htb/admin-dir => http://admirer.htb/admin-dir/
301 GET 9l 28w 311c http://admirer.htb/images => http://admirer.htb/images/
200 GET 409l 2427w 91128c http://admirer.htb/images/fulls/mind02.jpg
403 GET 9l 28w 276c http://admirer.htb/images/fulls/
301 GET 9l 28w 311c http://admirer.htb/assets => http://admirer.htb/assets/
403 GET 9l 28w 276c http://admirer.htb/images/fulls/.html
200 GET 694l 5500w 329712c http://admirer.htb/images/fulls/eng01.jpg
200 GET 281l 537w 6107c http://admirer.htb/assets/js/main.js
403 GET 9l 28w 276c http://admirer.htb/images/fulls/.php
200 GET 1154l 5907w 292305c http://admirer.htb/images/fulls/mus01.jpg
403 GET 9l 28w 276c http://admirer.htb/.html
200 GET 222l 1966w 108570c http://admirer.htb/images/thumbs/thmb_mind01.jpg
200 GET 230l 1300w 58053c http://admirer.htb/images/thumbs/thmb_mind02.jpg
200 GET 27l 57w 436c http://admirer.htb/assets/css/noscript.css
403 GET 9l 28w 276c http://admirer.htb/.php
200 GET 984l 8797w 559479c http://admirer.htb/images/fulls/nat02.jpg
200 GET 2050l 4273w 44147c http://admirer.htb/assets/css/main.css
200 GET 228l 1761w 101537c http://admirer.htb/images/thumbs/thmb_arch02.jpg
200 GET 706l 4225w 162548c http://admirer.htb/images/fulls/art02.jpg
200 GET 2l 51w 1851c http://admirer.htb/assets/js/browser.min.js
200 GET 241l 2097w 117848c http://admirer.htb/images/thumbs/thmb_arch01.jpg
200 GET 674l 2692w 133131c http://admirer.htb/images/fulls/arch02.jpg
200 GET 2l 119w 12085c http://admirer.htb/assets/js/jquery.poptrox.min.js
200 GET 173l 1521w 87151c http://admirer.htb/images/thumbs/thmb_mus02.jpg
200 GET 1300l 5571w 262596c http://admirer.htb/images/fulls/nat01.jpg
200 GET 281l 1437w 60663c http://admirer.htb/images/thumbs/thmb_mus01.jpg
200 GET 29l 39w 350c http://admirer.htb/admin-dir/contacts.txt
200 GET 240l 2194w 120238c http://admirer.htb/images/thumbs/thmb_nat02.jpg
403 GET 9l 28w 276c http://admirer.htb/assets/css/
301 GET 9l 28w 322c http://admirer.htb/assets/css/images => http://admirer.htb/assets/css/images/
200 GET 582l 4456w 294837c http://admirer.htb/images/fulls/mus02.jpg
200 GET 2l 1276w 88145c http://admirer.htb/assets/js/jquery.min.js
403 GET 9l 28w 276c http://admirer.htb/assets/css/.html
200 GET 440l 2890w 146980c http://admirer.htb/images/fulls/art01.jpg
200 GET 587l 1232w 12433c http://admirer.htb/assets/js/util.js
200 GET 128l 808w 42049c http://admirer.htb/images/thumbs/thmb_eng02.jpg
403 GET 9l 28w 276c http://admirer.htb/assets/css/.php
200 GET 2l 87w 2439c http://admirer.htb/assets/js/breakpoints.min.js
200 GET 219l 1339w 56684c http://admirer.htb/images/thumbs/thmb_nat01.jpg
200 GET 204l 1299w 61571c http://admirer.htb/images/thumbs/thmb_art02.jpg
200 GET 427l 1833w 112696c http://admirer.htb/images/fulls/eng02.jpg
403 GET 9l 28w 276c http://admirer.htb/assets/js/
403 GET 9l 28w 276c http://admirer.htb/images/thumbs/
200 GET 181l 1429w 79221c http://admirer.htb/images/thumbs/thmb_art01.jpg
200 GET 876l 4293w 193360c http://admirer.htb/images/fulls/arch01.jpg
200 GET 1435l 11709w 637125c http://admirer.htb/images/fulls/mind01.jpg
200 GET 195l 1798w 100866c http://admirer.htb/images/thumbs/thmb_eng01.jpg
200 GET 153l 529w 6051c http://admirer.htb/
301 GET 9l 28w 315c http://admirer.htb/assets/css => http://admirer.htb/assets/css/
403 GET 9l 28w 276c http://admirer.htb/assets/js/.html
403 GET 9l 28w 276c http://admirer.htb/images/thumbs/.html
403 GET 9l 28w 276c http://admirer.htb/assets/js/.php
403 GET 9l 28w 276c http://admirer.htb/images/thumbs/.php
301 GET 9l 28w 318c http://admirer.htb/images/thumbs => http://admirer.htb/images/thumbs/
301 GET 9l 28w 314c http://admirer.htb/assets/js => http://admirer.htb/assets/js/
200 GET 4l 23w 138c http://admirer.htb/robots.txt
301 GET 9l 28w 316c http://admirer.htb/assets/sass => http://admirer.htb/assets/sass/
301 GET 9l 28w 327c http://admirer.htb/assets/sass/components => http://admirer.htb/assets/sass/components/
403 GET 9l 28w 276c http://admirer.htb/assets/sass/.html
403 GET 9l 28w 276c http://admirer.htb/assets/sass/.php
301 GET 9l 28w 321c http://admirer.htb/assets/sass/base => http://admirer.htb/assets/sass/base/
403 GET 9l 28w 276c http://admirer.htb/server-status
301 GET 9l 28w 321c http://admirer.htb/assets/sass/libs => http://admirer.htb/assets/sass/libs/
200 GET 11l 13w 136c http://admirer.htb/admin-dir/credentials.txt

11
HTB/admirer/results/admirer.htb/scans/tcp80/tcp_80_http_nmap.txt Normal file
View File

@@ -0,0 +1,11 @@
# Nmap 7.93 scan initiated Sat Jan 21 07:14:43 2023 as: nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /home/simon/htb/admirer/results/admirer.htb/scans/tcp80/tcp_80_http_nmap.txt -oX /home/simon/htb/admirer/results/admirer.htb/scans/tcp80/xml/tcp_80_http_nmap.xml admirer.htb
Nmap scan report for admirer.htb (10.129.228.103)
Host is up, received user-set.
Scanned at 2023-01-21 07:14:44 UTC for 1s
PORT STATE SERVICE REASON VERSION
80/tcp filtered http no-response
Read data files from: /usr/bin/../share/nmap
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sat Jan 21 07:14:46 2023 -- 1 IP address (1 host up) scanned in 2.68 seconds

BIN
HTB/admirer/results/admirer.htb/scans/tcp80/tcp_80_http_screenshot.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 7.1 MiB

1
HTB/admirer/results/admirer.htb/scans/tcp80/tcp_80_http_whatweb.txt Normal file
View File

@@ -0,0 +1 @@

41
HTB/admirer/results/admirer.htb/scans/tcp80/xml/tcp_80_http_nmap.xml Normal file
View File

@@ -0,0 +1,41 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE nmaprun>
<?xml-stylesheet href="file:///usr/bin/../share/nmap/nmap.xsl" type="text/xsl"?>
<!-- Nmap 7.93 scan initiated Sat Jan 21 07:14:43 2023 as: nmap -vv -&#45;reason -Pn -T4 -sV -p 80 &quot;-&#45;script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)&quot; -oN /home/simon/htb/admirer/results/admirer.htb/scans/tcp80/tcp_80_http_nmap.txt -oX /home/simon/htb/admirer/results/admirer.htb/scans/tcp80/xml/tcp_80_http_nmap.xml admirer.htb -->
<nmaprun scanner="nmap" args="nmap -vv -&#45;reason -Pn -T4 -sV -p 80 &quot;-&#45;script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)&quot; -oN /home/simon/htb/admirer/results/admirer.htb/scans/tcp80/tcp_80_http_nmap.txt -oX /home/simon/htb/admirer/results/admirer.htb/scans/tcp80/xml/tcp_80_http_nmap.xml admirer.htb" start="1674285283" startstr="Sat Jan 21 07:14:43 2023" version="7.93" xmloutputversion="1.05">
<scaninfo type="connect" protocol="tcp" numservices="1" services="80"/>
<verbose level="2"/>
<debugging level="0"/>
<taskbegin task="NSE" time="1674285284"/>
<taskend task="NSE" time="1674285284"/>
<taskbegin task="NSE" time="1674285284"/>
<taskend task="NSE" time="1674285284"/>
<taskbegin task="NSE" time="1674285284"/>
<taskend task="NSE" time="1674285284"/>
<taskbegin task="Connect Scan" time="1674285284"/>
<taskend task="Connect Scan" time="1674285285" extrainfo="1 total ports"/>
<taskbegin task="Service scan" time="1674285286"/>
<taskbegin task="NSE" time="1674285286"/>
<taskend task="NSE" time="1674285286"/>
<taskbegin task="NSE" time="1674285286"/>
<taskend task="NSE" time="1674285286"/>
<taskbegin task="NSE" time="1674285286"/>
<taskend task="NSE" time="1674285286"/>
<host starttime="1674285284" endtime="1674285285"><status state="up" reason="user-set" reason_ttl="0"/>
<address addr="10.129.228.103" addrtype="ipv4"/>
<hostnames>
<hostname name="admirer.htb" type="user"/>
<hostname name="admirer.htb" type="PTR"/>
</hostnames>
<ports><port protocol="tcp" portid="80"><state state="filtered" reason="no-response" reason_ttl="0"/><service name="http" method="table" conf="3"/></port>
</ports>
</host>
<taskbegin task="NSE" time="1674285286"/>
<taskend task="NSE" time="1674285286"/>
<taskbegin task="NSE" time="1674285286"/>
<taskend task="NSE" time="1674285286"/>
<taskbegin task="NSE" time="1674285286"/>
<taskend task="NSE" time="1674285286"/>
<runstats><finished time="1674285286" timestr="Sat Jan 21 07:14:46 2023" summary="Nmap done at Sat Jan 21 07:14:46 2023; 1 IP address (1 host up) scanned in 2.68 seconds" elapsed="2.68" exit="success"/><hosts up="1" down="0" total="1"/>
</runstats>
</nmaprun>

66
HTB/admirer/results/admirer.htb/scans/xml/_full_tcp_nmap.xml Normal file
View File

@@ -0,0 +1,66 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE nmaprun>
<?xml-stylesheet href="file:///usr/bin/../share/nmap/nmap.xsl" type="text/xsl"?>
<!-- Nmap 7.93 scan initiated Sat Jan 21 07:14:33 2023 as: nmap -vv -&#45;reason -Pn -T4 -sV -sC -&#45;version-all -A -&#45;osscan-guess -p- -oN /home/simon/htb/admirer/results/admirer.htb/scans/_full_tcp_nmap.txt -oX /home/simon/htb/admirer/results/admirer.htb/scans/xml/_full_tcp_nmap.xml admirer.htb -->
<nmaprun scanner="nmap" args="nmap -vv -&#45;reason -Pn -T4 -sV -sC -&#45;version-all -A -&#45;osscan-guess -p- -oN /home/simon/htb/admirer/results/admirer.htb/scans/_full_tcp_nmap.txt -oX /home/simon/htb/admirer/results/admirer.htb/scans/xml/_full_tcp_nmap.xml admirer.htb" start="1674285273" startstr="Sat Jan 21 07:14:33 2023" version="7.93" xmloutputversion="1.05">
<scaninfo type="connect" protocol="tcp" numservices="65535" services="1-65535"/>
<verbose level="2"/>
<debugging level="0"/>
<taskbegin task="NSE" time="1674285273"/>
<taskend task="NSE" time="1674285273"/>
<taskbegin task="NSE" time="1674285273"/>
<taskend task="NSE" time="1674285273"/>
<taskbegin task="NSE" time="1674285273"/>
<taskend task="NSE" time="1674285273"/>
<taskbegin task="Connect Scan" time="1674285273"/>
<taskend task="Connect Scan" time="1674285280" extrainfo="65535 total ports"/>
<taskbegin task="Service scan" time="1674285280"/>
<taskend task="Service scan" time="1674285294" extrainfo="3 services on 1 host"/>
<taskbegin task="NSE" time="1674285294"/>
<taskend task="NSE" time="1674285315"/>
<taskbegin task="NSE" time="1674285315"/>
<taskend task="NSE" time="1674285317"/>
<taskbegin task="NSE" time="1674285317"/>
<taskend task="NSE" time="1674285317"/>
<host starttime="1674285273" endtime="1674285317"><status state="up" reason="user-set" reason_ttl="0"/>
<address addr="10.129.228.103" addrtype="ipv4"/>
<hostnames>
<hostname name="admirer.htb" type="user"/>
<hostname name="admirer.htb" type="PTR"/>
</hostnames>
<ports><extraports state="closed" count="65532">
<extrareasons reason="conn-refused" count="65532" proto="tcp" ports="1-20,23-79,81-65535"/>
</extraports>
<port protocol="tcp" portid="21"><state state="open" reason="syn-ack" reason_ttl="0"/><service name="ftp" product="vsftpd" version="3.0.3" ostype="Unix" method="probed" conf="10"><cpe>cpe:/a:vsftpd:vsftpd:3.0.3</cpe></service></port>
<port protocol="tcp" portid="22"><state state="open" reason="syn-ack" reason_ttl="0"/><service name="ssh" product="OpenSSH" version="7.4p1 Debian 10+deb9u7" extrainfo="protocol 2.0" ostype="Linux" method="probed" conf="10"><cpe>cpe:/a:openbsd:openssh:7.4p1</cpe><cpe>cpe:/o:linux:linux_kernel</cpe></service><script id="ssh-hostkey" output="&#xa; 2048 4a71e92163699dcbdd84021a2397e1b9 (RSA)&#xa;ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDaQHjxkc8zeXPgI5C7066uFJaB6EjvTGDEwbfl0cwM95npP9G8icv1F/YQgKxqqcGzl+pVaAybRnQxiZkrZHbnJlMzUzNTxxI5cy+7W0dRZN4VH4YjkXFrZRw6dx/5L1wP4qLtdQ0tLHmgzwJZO+111mrAGXMt0G+SCnQ30U7vp95EtIC0gbiGDx0dDVgMeg43+LkzWG+Nj+mQ5KCQBjDLFaZXwCp5Pqfrpf3AmERjoFHIE8Df4QO3lKT9Ov1HWcnfFuqSH/pl5+m83ecQGS1uxAaokNfn9Nkg12dZP1JSk+Tt28VrpOZDKhVvAQhXWONMTyuRJmVg/hnrSfxTwbM9&#xa; 256 c595b6214d46a425557a873e19a8e702 (ECDSA)&#xa;ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBNHgxoAB6NHTQnBo+/MqdfMsEet9jVzP94okTOAWWMpWkWkT+X4EEWRzlxZKwb/dnt99LS8WNZkR0P9HQxMcIII=&#xa; 256 d02dddd05c42f87b315abe57c4a9a756 (ED25519)&#xa;ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBqp21lADoWZ+184z0m9zCpORbmmngq+h498H9JVf7kP"><table>
<elem key="fingerprint">4a71e92163699dcbdd84021a2397e1b9</elem>
<elem key="key">AAAAB3NzaC1yc2EAAAADAQABAAABAQDaQHjxkc8zeXPgI5C7066uFJaB6EjvTGDEwbfl0cwM95npP9G8icv1F/YQgKxqqcGzl+pVaAybRnQxiZkrZHbnJlMzUzNTxxI5cy+7W0dRZN4VH4YjkXFrZRw6dx/5L1wP4qLtdQ0tLHmgzwJZO+111mrAGXMt0G+SCnQ30U7vp95EtIC0gbiGDx0dDVgMeg43+LkzWG+Nj+mQ5KCQBjDLFaZXwCp5Pqfrpf3AmERjoFHIE8Df4QO3lKT9Ov1HWcnfFuqSH/pl5+m83ecQGS1uxAaokNfn9Nkg12dZP1JSk+Tt28VrpOZDKhVvAQhXWONMTyuRJmVg/hnrSfxTwbM9</elem>
<elem key="type">ssh-rsa</elem>
<elem key="bits">2048</elem>
</table>
<table>
<elem key="fingerprint">c595b6214d46a425557a873e19a8e702</elem>
<elem key="key">AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBNHgxoAB6NHTQnBo+/MqdfMsEet9jVzP94okTOAWWMpWkWkT+X4EEWRzlxZKwb/dnt99LS8WNZkR0P9HQxMcIII=</elem>
<elem key="type">ecdsa-sha2-nistp256</elem>
<elem key="bits">256</elem>
</table>
<table>
<elem key="fingerprint">d02dddd05c42f87b315abe57c4a9a756</elem>
<elem key="key">AAAAC3NzaC1lZDI1NTE5AAAAIBqp21lADoWZ+184z0m9zCpORbmmngq+h498H9JVf7kP</elem>
<elem key="type">ssh-ed25519</elem>
<elem key="bits">256</elem>
</table>
</script></port>
<port protocol="tcp" portid="80"><state state="open" reason="syn-ack" reason_ttl="0"/><service name="http" product="Apache httpd" version="2.4.25" extrainfo="(Debian)" method="probed" conf="10"><cpe>cpe:/a:apache:http_server:2.4.25</cpe></service></port>
</ports>
<times srtt="58297" rttvar="11394" to="103873"/>
</host>
<taskbegin task="NSE" time="1674285317"/>
<taskend task="NSE" time="1674285317"/>
<taskbegin task="NSE" time="1674285317"/>
<taskend task="NSE" time="1674285317"/>
<taskbegin task="NSE" time="1674285317"/>
<taskend task="NSE" time="1674285317"/>
<runstats><finished time="1674285317" timestr="Sat Jan 21 07:15:17 2023" summary="Nmap done at Sat Jan 21 07:15:17 2023; 1 IP address (1 host up) scanned in 44.89 seconds" elapsed="44.89" exit="success"/><hosts up="1" down="0" total="1"/>
</runstats>
</nmaprun>

74
HTB/admirer/results/admirer.htb/scans/xml/_quick_tcp_nmap.xml Normal file
View File

@@ -0,0 +1,74 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE nmaprun>
<?xml-stylesheet href="file:///usr/bin/../share/nmap/nmap.xsl" type="text/xsl"?>
<!-- Nmap 7.93 scan initiated Sat Jan 21 07:14:33 2023 as: nmap -vv -&#45;reason -Pn -T4 -sV -sC -&#45;version-all -A -&#45;osscan-guess -oN /home/simon/htb/admirer/results/admirer.htb/scans/_quick_tcp_nmap.txt -oX /home/simon/htb/admirer/results/admirer.htb/scans/xml/_quick_tcp_nmap.xml admirer.htb -->
<nmaprun scanner="nmap" args="nmap -vv -&#45;reason -Pn -T4 -sV -sC -&#45;version-all -A -&#45;osscan-guess -oN /home/simon/htb/admirer/results/admirer.htb/scans/_quick_tcp_nmap.txt -oX /home/simon/htb/admirer/results/admirer.htb/scans/xml/_quick_tcp_nmap.xml admirer.htb" start="1674285273" startstr="Sat Jan 21 07:14:33 2023" version="7.93" xmloutputversion="1.05">
<scaninfo type="connect" protocol="tcp" numservices="1000" services="1,3-4,6-7,9,13,17,19-26,30,32-33,37,42-43,49,53,70,79-85,88-90,99-100,106,109-111,113,119,125,135,139,143-144,146,161,163,179,199,211-212,222,254-256,259,264,280,301,306,311,340,366,389,406-407,416-417,425,427,443-445,458,464-465,481,497,500,512-515,524,541,543-545,548,554-555,563,587,593,616-617,625,631,636,646,648,666-668,683,687,691,700,705,711,714,720,722,726,749,765,777,783,787,800-801,808,843,873,880,888,898,900-903,911-912,981,987,990,992-993,995,999-1002,1007,1009-1011,1021-1100,1102,1104-1108,1110-1114,1117,1119,1121-1124,1126,1130-1132,1137-1138,1141,1145,1147-1149,1151-1152,1154,1163-1166,1169,1174-1175,1183,1185-1187,1192,1198-1199,1201,1213,1216-1218,1233-1234,1236,1244,1247-1248,1259,1271-1272,1277,1287,1296,1300-1301,1309-1311,1322,1328,1334,1352,1417,1433-1434,1443,1455,1461,1494,1500-1501,1503,1521,1524,1533,1556,1580,1583,1594,1600,1641,1658,1666,1687-1688,1700,1717-1721,1723,1755,1761,1782-1783,1801,1805,1812,1839-1840,1862-1864,1875,1900,1914,1935,1947,1971-1972,1974,1984,1998-2010,2013,2020-2022,2030,2033-2035,2038,2040-2043,2045-2049,2065,2068,2099-2100,2103,2105-2107,2111,2119,2121,2126,2135,2144,2160-2161,2170,2179,2190-2191,2196,2200,2222,2251,2260,2288,2301,2323,2366,2381-2383,2393-2394,2399,2401,2492,2500,2522,2525,2557,2601-2602,2604-2605,2607-2608,2638,2701-2702,2710,2717-2718,2725,2800,2809,2811,2869,2875,2909-2910,2920,2967-2968,2998,3000-3001,3003,3005-3007,3011,3013,3017,3030-3031,3052,3071,3077,3128,3168,3211,3221,3260-3261,3268-3269,3283,3300-3301,3306,3322-3325,3333,3351,3367,3369-3372,3389-3390,3404,3476,3493,3517,3527,3546,3551,3580,3659,3689-3690,3703,3737,3766,3784,3800-3801,3809,3814,3826-3828,3851,3869,3871,3878,3880,3889,3905,3914,3918,3920,3945,3971,3986,3995,3998,4000-4006,4045,4111,4125-4126,4129,4224,4242,4279,4321,4343,4443-4446,4449,4550,4567,4662,4848,4899-4900,4998,5000-5004,5009,5030,5033,5050-5051,5054,5060-5061,5080,5087,5100-5102,5120,5190,5200,5214,5221-5222,5225-5226,5269,5280,5298,5357,5405,5414,5431-5432,5440,5500,5510,5544,5550,5555,5560,5566,5631,5633,5666,5678-5679,5718,5730,5800-5802,5810-5811,5815,5822,5825,5850,5859,5862,5877,5900-5904,5906-5907,5910-5911,5915,5922,5925,5950,5952,5959-5963,5987-5989,5998-6007,6009,6025,6059,6100-6101,6106,6112,6123,6129,6156,6346,6389,6502,6510,6543,6547,6565-6567,6580,6646,6666-6669,6689,6692,6699,6779,6788-6789,6792,6839,6881,6901,6969,7000-7002,7004,7007,7019,7025,7070,7100,7103,7106,7200-7201,7402,7435,7443,7496,7512,7625,7627,7676,7741,7777-7778,7800,7911,7920-7921,7937-7938,7999-8002,8007-8011,8021-8022,8031,8042,8045,8080-8090,8093,8099-8100,8180-8181,8192-8194,8200,8222,8254,8290-8292,8300,8333,8383,8400,8402,8443,8500,8600,8649,8651-8652,8654,8701,8800,8873,8888,8899,8994,9000-9003,9009-9011,9040,9050,9071,9080-9081,9090-9091,9099-9103,9110-9111,9200,9207,9220,9290,9415,9418,9485,9500,9502-9503,9535,9575,9593-9595,9618,9666,9876-9878,9898,9900,9917,9929,9943-9944,9968,9998-10004,10009-10010,10012,10024-10025,10082,10180,10215,10243,10566,10616-10617,10621,10626,10628-10629,10778,11110-11111,11967,12000,12174,12265,12345,13456,13722,13782-13783,14000,14238,14441-14442,15000,15002-15004,15660,15742,16000-16001,16012,16016,16018,16080,16113,16992-16993,17877,17988,18040,18101,18988,19101,19283,19315,19350,19780,19801,19842,20000,20005,20031,20221-20222,20828,21571,22939,23502,24444,24800,25734-25735,26214,27000,27352-27353,27355-27356,27715,28201,30000,30718,30951,31038,31337,32768-32785,33354,33899,34571-34573,35500,38292,40193,40911,41511,42510,44176,44442-44443,44501,45100,48080,49152-49161,49163,49165,49167,49175-49176,49400,49999-50003,50006,50300,50389,50500,50636,50800,51103,51493,52673,52822,52848,52869,54045,54328,55055-55056,55555,55600,56737-56738,57294,57797,58080,60020,60443,61532,61900,62078,63331,64623,64680,65000,65129,65389"/>
<verbose level="2"/>
<debugging level="0"/>
<taskbegin task="NSE" time="1674285273"/>
<taskend task="NSE" time="1674285273"/>
<taskbegin task="NSE" time="1674285273"/>
<taskend task="NSE" time="1674285273"/>
<taskbegin task="NSE" time="1674285273"/>
<taskend task="NSE" time="1674285273"/>
<taskbegin task="Connect Scan" time="1674285273"/>
<taskend task="Connect Scan" time="1674285274" extrainfo="1000 total ports"/>
<taskbegin task="Service scan" time="1674285274"/>
<taskend task="Service scan" time="1674285280" extrainfo="3 services on 1 host"/>
<taskbegin task="NSE" time="1674285280"/>
<taskend task="NSE" time="1674285282"/>
<taskbegin task="NSE" time="1674285282"/>
<taskend task="NSE" time="1674285282"/>
<taskbegin task="NSE" time="1674285282"/>
<taskend task="NSE" time="1674285282"/>
<host starttime="1674285273" endtime="1674285282"><status state="up" reason="user-set" reason_ttl="0"/>
<address addr="10.129.228.103" addrtype="ipv4"/>
<hostnames>
<hostname name="admirer.htb" type="user"/>
<hostname name="admirer.htb" type="PTR"/>
</hostnames>
<ports><extraports state="closed" count="997">
<extrareasons reason="conn-refused" count="997" proto="tcp" ports="1,3-4,6-7,9,13,17,19-20,23-26,30,32-33,37,42-43,49,53,70,79,81-85,88-90,99-100,106,109-111,113,119,125,135,139,143-144,146,161,163,179,199,211-212,222,254-256,259,264,280,301,306,311,340,366,389,406-407,416-417,425,427,443-445,458,464-465,481,497,500,512-515,524,541,543-545,548,554-555,563,587,593,616-617,625,631,636,646,648,666-668,683,687,691,700,705,711,714,720,722,726,749,765,777,783,787,800-801,808,843,873,880,888,898,900-903,911-912,981,987,990,992-993,995,999-1002,1007,1009-1011,1021-1100,1102,1104-1108,1110-1114,1117,1119,1121-1124,1126,1130-1132,1137-1138,1141,1145,1147-1149,1151-1152,1154,1163-1166,1169,1174-1175,1183,1185-1187,1192,1198-1199,1201,1213,1216-1218,1233-1234,1236,1244,1247-1248,1259,1271-1272,1277,1287,1296,1300-1301,1309-1311,1322,1328,1334,1352,1417,1433-1434,1443,1455,1461,1494,1500-1501,1503,1521,1524,1533,1556,1580,1583,1594,1600,1641,1658,1666,1687-1688,1700,1717-1721,1723,1755,1761,1782-1783,1801,1805,1812,1839-1840,1862-1864,1875,1900,1914,1935,1947,1971-1972,1974,1984,1998-2010,2013,2020-2022,2030,2033-2035,2038,2040-2043,2045-2049,2065,2068,2099-2100,2103,2105-2107,2111,2119,2121,2126,2135,2144,2160-2161,2170,2179,2190-2191,2196,2200,2222,2251,2260,2288,2301,2323,2366,2381-2383,2393-2394,2399,2401,2492,2500,2522,2525,2557,2601-2602,2604-2605,2607-2608,2638,2701-2702,2710,2717-2718,2725,2800,2809,2811,2869,2875,2909-2910,2920,2967-2968,2998,3000-3001,3003,3005-3007,3011,3013,3017,3030-3031,3052,3071,3077,3128,3168,3211,3221,3260-3261,3268-3269,3283,3300-3301,3306,3322-3325,3333,3351,3367,3369-3372,3389-3390,3404,3476,3493,3517,3527,3546,3551,3580,3659,3689-3690,3703,3737,3766,3784,3800-3801,3809,3814,3826-3828,3851,3869,3871,3878,3880,3889,3905,3914,3918,3920,3945,3971,3986,3995,3998,4000-4006,4045,4111,4125-4126,4129,4224,4242,4279,4321,4343,4443-4446,4449,4550,4567,4662,4848,4899-4900,4998,5000-5004,5009,5030,5033,5050-5051,5054,5060-5061,5080,5087,5100-5102,5120,5190,5200,5214,5221-5222,5225-5226,5269,5280,5298,5357,5405,5414,5431-5432,5440,5500,5510,5544,5550,5555,5560,5566,5631,5633,5666,5678-5679,5718,5730,5800-5802,5810-5811,5815,5822,5825,5850,5859,5862,5877,5900-5904,5906-5907,5910-5911,5915,5922,5925,5950,5952,5959-5963,5987-5989,5998-6007,6009,6025,6059,6100-6101,6106,6112,6123,6129,6156,6346,6389,6502,6510,6543,6547,6565-6567,6580,6646,6666-6669,6689,6692,6699,6779,6788-6789,6792,6839,6881,6901,6969,7000-7002,7004,7007,7019,7025,7070,7100,7103,7106,7200-7201,7402,7435,7443,7496,7512,7625,7627,7676,7741,7777-7778,7800,7911,7920-7921,7937-7938,7999-8002,8007-8011,8021-8022,8031,8042,8045,8080-8090,8093,8099-8100,8180-8181,8192-8194,8200,8222,8254,8290-8292,8300,8333,8383,8400,8402,8443,8500,8600,8649,8651-8652,8654,8701,8800,8873,8888,8899,8994,9000-9003,9009-9011,9040,9050,9071,9080-9081,9090-9091,9099-9103,9110-9111,9200,9207,9220,9290,9415,9418,9485,9500,9502-9503,9535,9575,9593-9595,9618,9666,9876-9878,9898,9900,9917,9929,9943-9944,9968,9998-10004,10009-10010,10012,10024-10025,10082,10180,10215,10243,10566,10616-10617,10621,10626,10628-10629,10778,11110-11111,11967,12000,12174,12265,12345,13456,13722,13782-13783,14000,14238,14441-14442,15000,15002-15004,15660,15742,16000-16001,16012,16016,16018,16080,16113,16992-16993,17877,17988,18040,18101,18988,19101,19283,19315,19350,19780,19801,19842,20000,20005,20031,20221-20222,20828,21571,22939,23502,24444,24800,25734-25735,26214,27000,27352-27353,27355-27356,27715,28201,30000,30718,30951,31038,31337,32768-32785,33354,33899,34571-34573,35500,38292,40193,40911,41511,42510,44176,44442-44443,44501,45100,48080,49152-49161,49163,49165,49167,49175-49176,49400,49999-50003,50006,50300,50389,50500,50636,50800,51103,51493,52673,52822,52848,52869,54045,54328,55055-55056,55555,55600,56737-56738,57294,57797,58080,60020,60443,61532,61900,62078,63331,64623,64680,65000,65129,65389"/>
</extraports>
<port protocol="tcp" portid="21"><state state="open" reason="syn-ack" reason_ttl="0"/><service name="ftp" product="vsftpd" version="3.0.3" ostype="Unix" method="probed" conf="10"><cpe>cpe:/a:vsftpd:vsftpd:3.0.3</cpe></service></port>
<port protocol="tcp" portid="22"><state state="open" reason="syn-ack" reason_ttl="0"/><service name="ssh" product="OpenSSH" version="7.4p1 Debian 10+deb9u7" extrainfo="protocol 2.0" ostype="Linux" method="probed" conf="10"><cpe>cpe:/a:openbsd:openssh:7.4p1</cpe><cpe>cpe:/o:linux:linux_kernel</cpe></service><script id="ssh-hostkey" output="&#xa; 2048 4a71e92163699dcbdd84021a2397e1b9 (RSA)&#xa;ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDaQHjxkc8zeXPgI5C7066uFJaB6EjvTGDEwbfl0cwM95npP9G8icv1F/YQgKxqqcGzl+pVaAybRnQxiZkrZHbnJlMzUzNTxxI5cy+7W0dRZN4VH4YjkXFrZRw6dx/5L1wP4qLtdQ0tLHmgzwJZO+111mrAGXMt0G+SCnQ30U7vp95EtIC0gbiGDx0dDVgMeg43+LkzWG+Nj+mQ5KCQBjDLFaZXwCp5Pqfrpf3AmERjoFHIE8Df4QO3lKT9Ov1HWcnfFuqSH/pl5+m83ecQGS1uxAaokNfn9Nkg12dZP1JSk+Tt28VrpOZDKhVvAQhXWONMTyuRJmVg/hnrSfxTwbM9&#xa; 256 c595b6214d46a425557a873e19a8e702 (ECDSA)&#xa;ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBNHgxoAB6NHTQnBo+/MqdfMsEet9jVzP94okTOAWWMpWkWkT+X4EEWRzlxZKwb/dnt99LS8WNZkR0P9HQxMcIII=&#xa; 256 d02dddd05c42f87b315abe57c4a9a756 (ED25519)&#xa;ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBqp21lADoWZ+184z0m9zCpORbmmngq+h498H9JVf7kP"><table>
<elem key="bits">2048</elem>
<elem key="key">AAAAB3NzaC1yc2EAAAADAQABAAABAQDaQHjxkc8zeXPgI5C7066uFJaB6EjvTGDEwbfl0cwM95npP9G8icv1F/YQgKxqqcGzl+pVaAybRnQxiZkrZHbnJlMzUzNTxxI5cy+7W0dRZN4VH4YjkXFrZRw6dx/5L1wP4qLtdQ0tLHmgzwJZO+111mrAGXMt0G+SCnQ30U7vp95EtIC0gbiGDx0dDVgMeg43+LkzWG+Nj+mQ5KCQBjDLFaZXwCp5Pqfrpf3AmERjoFHIE8Df4QO3lKT9Ov1HWcnfFuqSH/pl5+m83ecQGS1uxAaokNfn9Nkg12dZP1JSk+Tt28VrpOZDKhVvAQhXWONMTyuRJmVg/hnrSfxTwbM9</elem>
<elem key="fingerprint">4a71e92163699dcbdd84021a2397e1b9</elem>
<elem key="type">ssh-rsa</elem>
</table>
<table>
<elem key="bits">256</elem>
<elem key="key">AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBNHgxoAB6NHTQnBo+/MqdfMsEet9jVzP94okTOAWWMpWkWkT+X4EEWRzlxZKwb/dnt99LS8WNZkR0P9HQxMcIII=</elem>
<elem key="fingerprint">c595b6214d46a425557a873e19a8e702</elem>
<elem key="type">ecdsa-sha2-nistp256</elem>
</table>
<table>
<elem key="bits">256</elem>
<elem key="key">AAAAC3NzaC1lZDI1NTE5AAAAIBqp21lADoWZ+184z0m9zCpORbmmngq+h498H9JVf7kP</elem>
<elem key="fingerprint">d02dddd05c42f87b315abe57c4a9a756</elem>
<elem key="type">ssh-ed25519</elem>
</table>
</script></port>
<port protocol="tcp" portid="80"><state state="open" reason="syn-ack" reason_ttl="0"/><service name="http" product="Apache httpd" version="2.4.25" extrainfo="(Debian)" method="probed" conf="10"><cpe>cpe:/a:apache:http_server:2.4.25</cpe></service><script id="http-title" output="Admirer"><elem key="title">Admirer</elem>
</script><script id="http-robots.txt" output="1 disallowed entry &#xa;/admin-dir"/><script id="http-methods" output="&#xa; Supported Methods: GET HEAD POST OPTIONS"><table key="Supported Methods">
<elem>GET</elem>
<elem>HEAD</elem>
<elem>POST</elem>
<elem>OPTIONS</elem>
</table>
</script><script id="http-server-header" output="Apache/2.4.25 (Debian)"><elem>Apache/2.4.25 (Debian)</elem>
</script></port>
</ports>
<times srtt="25561" rttvar="832" to="100000"/>
</host>
<taskbegin task="NSE" time="1674285283"/>
<taskend task="NSE" time="1674285283"/>
<taskbegin task="NSE" time="1674285283"/>
<taskend task="NSE" time="1674285283"/>
<taskbegin task="NSE" time="1674285283"/>
<taskend task="NSE" time="1674285283"/>
<runstats><finished time="1674285283" timestr="Sat Jan 21 07:14:43 2023" summary="Nmap done at Sat Jan 21 07:14:43 2023; 1 IP address (1 host up) scanned in 9.94 seconds" elapsed="9.94" exit="success"/><hosts up="1" down="0" total="1"/>
</runstats>
</nmaprun>