# Практика №2. Сканирование корпоративной инфраструктуры Выполнил студент Кузнецов М.Г. БСБО-05-21 ## Просканируем meria.tech на сайте https://2ip.ru/whois/ *inetnum: 85.142.160.0 - 85.142.161.255* *netname: MIREA-2-NET* *descr: Moscow State Institute for RadioEngeeniring,* *Electronics and* *descr: Moscow, Russia* *descr: pr-t Vernadskogo, 78* *country: RU* *org: ORG-MIRE1-RIPE* *admin-c: DM9397-RIPE* *tech-c: MMSI2-RIPE* *status: ASSIGNED PA* *mnt-by: INFR-MNT* *created: 2018-08-08T10:15:00Z* *last-modified: 2022-11-14T09:42:40Z* *source: RIPE # Filtered* *organisation: ORG-MIRE1-RIPE* *Professional Education "Moscow State Institute of a Radio* *engineering, Electronics and Automatics" (MIREA)* *country: RU* *org-type: OTHER* *address: MIREA* *address: Vernadskogo 78* *address: 119454* *address: Moscow* *address: Russian Federation* *phone: +7 499 7399505* *phone: +7 495 9874717* *admin-c: DM9397-RIPE* *tech-c: MMSI2-RIPE* *abuse-c: MMSI2-RIPE* *mnt-ref: INFR-MNT* *mnt-ref: MIREA-MNT* *mnt-by: INFR-MNT* *mnt-by: MIREA-MNT* *created: 2018-08-08T10:10:07Z* *last-modified: 2022-12-01T16:37:18Z* *source: RIPE # Filtered* *role: MIREA NOC* *org: ORG-MIRE1-RIPE* *address: RTU MIREA* *address: Vernadskogo, 78* *address: 119454* *address: Moscow* *address: Russian Federation* *phone: +7 499 6008228* *phone: +7 499 6008080* *admin-c: DM9397-RIPE* *tech-c: FL8858* *nic-hdl: MMSI2-RIPE* *abuse-mailbox: noc@mirea.ru* *mnt-by: MIREA-MNT* *created: 2014-05-07T11:09:25Z* *last-modified: 2024-02-23T23:03:44Z* *source: RIPE # Filtered* *person: Dmitry Myakoshin* *address: 78, Vernadskogo prosp.* *address: 119454 Moscow* *address: Russia* *phone: +7 499 6008228* *nic-hdl: DM9397-RIPE* *mnt-by: MSU-MNT* *mnt-by: MIREA-MNT* *created: 2011-06-23T12:13:31Z* *last-modified: 2022-11-02T11:52:45Z* *source: RIPE # Filtered* *route: 85.142.160.0/23* *descr: Moscow State Institute for RadioEngeeniring,* *Electronics and* *descr: Moscow, Russia* *descr: pr-t Vernadskogo, 78* *origin: AS28800* *mnt-by: INFR-MNT* *created: 2018-08-08T17:10:38Z* *last-modified: 2018-08-08T17:10:38Z* *source: RIPE # Filtered* ## Просканируем с помощью subfinder домены mirea.tech, ptlab.ru ![Screenshot 2024-03-12 143540](https://hackmd.io/_uploads/SkXqAh6T6.png) ![Screenshot 2024-03-12 143711](https://hackmd.io/_uploads/H1Gi02p66.png) ## Просканируем сеть 85.142.160.0/23 в Nmap Nmap scan report for test.mirea.ru (85.142.160.1) Host is up (0.017s latency). Not shown: 775 closed ports, 224 filtered ports PORT STATE SERVICE 443/tcp open https Aggressive OS guesses: Actiontec MI424WR-GEN3I WAP (99%), DD-WRT v24-sp2 (Linux 2.4.37) (98%), Linux 3.2 (98%), Microsoft Windows XP SP3 or Windows 7 or Windows Server 2012 (96%), Linux 4.4 (96%), Microsoft Windows XP SP3 (96%), BlueArc Titan 2100 NAS device (91%) No exact OS matches for host (test conditions non-ideal). Nmap scan report for 85.142.160.9 Host is up (0.012s latency). Not shown: 995 filtered ports PORT STATE SERVICE 25/tcp closed smtp 443/tcp open https 465/tcp closed smtps 8090/tcp open opsmessaging 32772/tcp closed sometimes-rpc7 Aggressive OS guesses: Actiontec MI424WR-GEN3I WAP (99%), DD-WRT v24-sp2 (Linux 2.4.37) (98%), Linux 3.2 (98%), Microsoft Windows XP SP3 or Windows 7 or Windows Server 2012 (96%), Linux 4.4 (96%), Microsoft Windows XP SP3 (96%), BlueArc Titan 2100 NAS device (91%) No exact OS matches for host (test conditions non-ideal). Nmap scan report for 85.142.160.10 Host is up (0.14s latency). Not shown: 972 filtered ports PORT STATE SERVICE 3/tcp closed compressnet 4/tcp closed unknown 80/tcp open http 110/tcp closed pop3 111/tcp closed rpcbind 443/tcp open https 445/tcp closed microsoft-ds 465/tcp closed smtps 524/tcp closed ncp 783/tcp closed spamassassin 1051/tcp closed optima-vnet 1080/tcp closed socks 1875/tcp closed westell-stats 2119/tcp closed gsigatekeeper 3476/tcp closed nppmp 5087/tcp closed biotic 5405/tcp closed pcduo 5962/tcp closed unknown 8002/tcp open teradataordbms 8009/tcp closed ajp13 8090/tcp open opsmessaging 8222/tcp closed unknown 8800/tcp closed sunwebadmin 9877/tcp closed unknown 16001/tcp closed fmsascon 20222/tcp closed ipulse-ics 32772/tcp closed sometimes-rpc7 49167/tcp closed unknown Aggressive OS guesses: Actiontec MI424WR-GEN3I WAP (99%), DD-WRT v24-sp2 (Linux 2.4.37) (97%), Linux 3.2 (97%), Linux 4.4 (97%), Microsoft Windows XP SP3 or Windows 7 or Windows Server 2012 (95%), Microsoft Windows XP SP3 (95%), BlueArc Titan 2100 NAS device (92%) No exact OS matches for host (test conditions non-ideal). Nmap scan report for 85.142.160.12 Host is up (0.00037s latency). Not shown: 998 filtered ports PORT STATE SERVICE 5087/tcp closed biotic 5950/tcp closed unknown Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: general purpose Running: Microsoft Windows XP|7|2012 OS CPE: cpe:/o:microsoft:windows_xp::sp3 cpe:/o:microsoft:windows_7 cpe:/o:microsoft:windows_server_2012 OS details: Microsoft Windows XP SP3, Microsoft Windows XP SP3 or Windows 7 or Windows Server 2012 Nmap scan report for 85.142.160.17 Host is up (0.00029s latency). Not shown: 998 filtered ports PORT STATE SERVICE 5405/tcp closed pcduo 9877/tcp closed unknown Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: general purpose Running: Microsoft Windows XP|7|2012 OS CPE: cpe:/o:microsoft:windows_xp::sp3 cpe:/o:microsoft:windows_7 cpe:/o:microsoft:windows_server_2012 OS details: Microsoft Windows XP SP3, Microsoft Windows XP SP3 or Windows 7 or Windows Server 2012 Nmap scan report for 85.142.160.21 Host is up (0.00030s latency). Not shown: 999 filtered ports PORT STATE SERVICE 8222/tcp closed unknown Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: general purpose Running: Microsoft Windows XP|7|2012 OS CPE: cpe:/o:microsoft:windows_xp::sp3 cpe:/o:microsoft:windows_7 cpe:/o:microsoft:windows_server_2012 OS details: Microsoft Windows XP SP3, Microsoft Windows XP SP3 or Windows 7 or Windows Server 2012 Nmap scan report for 85.142.160.24 Host is up (0.00030s latency). Not shown: 999 filtered ports PORT STATE SERVICE 6123/tcp closed backup-express Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: general purpose Running: Microsoft Windows XP|7|2012 OS CPE: cpe:/o:microsoft:windows_xp::sp3 cpe:/o:microsoft:windows_7 cpe:/o:microsoft:windows_server_2012 OS details: Microsoft Windows XP SP3, Microsoft Windows XP SP3 or Windows 7 or Windows Server 2012 Nmap scan report for 85.142.160.26 Host is up (0.00029s latency). Not shown: 999 filtered ports PORT STATE SERVICE 3476/tcp closed nppmp Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: general purpose Running: Microsoft Windows XP|7|2012 OS CPE: cpe:/o:microsoft:windows_xp::sp3 cpe:/o:microsoft:windows_7 cpe:/o:microsoft:windows_server_2012 OS details: Microsoft Windows XP SP3, Microsoft Windows XP SP3 or Windows 7 or Windows Server 2012 Nmap scan report for 85.142.160.31 Host is up (0.00027s latency). Not shown: 999 filtered ports PORT STATE SERVICE 3/tcp closed compressnet Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: general purpose Running: Microsoft Windows XP|7|2012 OS CPE: cpe:/o:microsoft:windows_xp::sp3 cpe:/o:microsoft:windows_7 cpe:/o:microsoft:windows_server_2012 OS details: Microsoft Windows XP SP3, Microsoft Windows XP SP3 or Windows 7 or Windows Server 2012 Nmap scan report for iep-tc.mirea.ru (85.142.160.35) Host is up (0.00028s latency). All 1000 scanned ports on iep-tc.mirea.ru (85.142.160.35) are filtered Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: general purpose Running: Microsoft Windows XP|7|2012 OS CPE: cpe:/o:microsoft:windows_xp::sp3 cpe:/o:microsoft:windows_7 cpe:/o:microsoft:windows_server_2012 OS details: Microsoft Windows XP SP3, Microsoft Windows XP SP3 or Windows 7 or Windows Server 2012 Nmap scan report for ivzo-tc.mirea.ru (85.142.160.36) Host is up (0.00027s latency). All 1000 scanned ports on ivzo-tc.mirea.ru (85.142.160.36) are filtered Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: general purpose Running: Microsoft Windows XP|7|2012 OS CPE: cpe:/o:microsoft:windows_xp::sp3 cpe:/o:microsoft:windows_7 cpe:/o:microsoft:windows_server_2012 OS details: Microsoft Windows XP SP3, Microsoft Windows XP SP3 or Windows 7 or Windows Server 2012 Nmap scan report for idp-tc.mirea.ru (85.142.160.37) Host is up (0.00027s latency). All 1000 scanned ports on idp-tc.mirea.ru (85.142.160.37) are filtered Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: general purpose Running: Microsoft Windows XP|7|2012 OS CPE: cpe:/o:microsoft:windows_xp::sp3 cpe:/o:microsoft:windows_7 cpe:/o:microsoft:windows_server_2012 OS details: Microsoft Windows XP SP3, Microsoft Windows XP SP3 or Windows 7 or Windows Server 2012 Nmap scan report for itht-tc.mirea.ru (85.142.160.38) Host is up (0.00029s latency). All 1000 scanned ports on itht-tc.mirea.ru (85.142.160.38) are filtered Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: general purpose Running: Microsoft Windows XP|7|2012 OS CPE: cpe:/o:microsoft:windows_xp::sp3 cpe:/o:microsoft:windows_7 cpe:/o:microsoft:windows_server_2012 OS details: Microsoft Windows XP SP3, Microsoft Windows XP SP3 or Windows 7 or Windows Server 2012 Nmap scan report for rts-tc.mirea.ru (85.142.160.39) Host is up (0.00028s latency). Not shown: 999 filtered ports PORT STATE SERVICE 32772/tcp closed sometimes-rpc7 Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: specialized|general purpose|printer Running (JUST GUESSING): Lancom LCOS 8.X (90%), Linux 2.6.X (87%), IBM embedded (86%) OS CPE: cpe:/o:lancom:lcos:8.00 cpe:/o:linux:linux_kernel:2.6.38 cpe:/h:ibm:infoprint_1754 Aggressive OS guesses: Lancom LCOS 8.00 (90%), Linux 2.6.38 (87%), IBM InfoPrint 1754 printer (86%) No exact OS matches for host (test conditions non-ideal). Nmap scan report for fti-tc.mirea.ru (85.142.160.40) Host is up (0.00030s latency). All 1000 scanned ports on fti-tc.mirea.ru (85.142.160.40) are filtered Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: general purpose Running: Microsoft Windows XP|7|2012 OS CPE: cpe:/o:microsoft:windows_xp::sp3 cpe:/o:microsoft:windows_7 cpe:/o:microsoft:windows_server_2012 OS details: Microsoft Windows XP SP3, Microsoft Windows XP SP3 or Windows 7 or Windows Server 2012 Nmap scan report for 85.142.160.45 Host is up (0.00027s latency). Not shown: 999 filtered ports PORT STATE SERVICE 49167/tcp closed unknown Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: general purpose Running: Microsoft Windows XP|7|2012 OS CPE: cpe:/o:microsoft:windows_xp::sp3 cpe:/o:microsoft:windows_7 cpe:/o:microsoft:windows_server_2012 OS details: Microsoft Windows XP SP3, Microsoft Windows XP SP3 or Windows 7 or Windows Server 2012 Nmap scan report for 85.142.160.46 Host is up (0.00028s latency). Not shown: 999 filtered ports PORT STATE SERVICE 1051/tcp closed optima-vnet Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: general purpose Running: Microsoft Windows XP|7|2012 OS CPE: cpe:/o:microsoft:windows_xp::sp3 cpe:/o:microsoft:windows_7 cpe:/o:microsoft:windows_server_2012 OS details: Microsoft Windows XP SP3, Microsoft Windows XP SP3 or Windows 7 or Windows Server 2012 Nmap scan report for 85.142.160.55 Host is up (0.00027s latency). Not shown: 999 filtered ports PORT STATE SERVICE 9877/tcp closed unknown Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: specialized|general purpose|printer Running (JUST GUESSING): Lancom LCOS 8.X (90%), Linux 2.6.X (87%), IBM embedded (86%) OS CPE: cpe:/o:lancom:lcos:8.00 cpe:/o:linux:linux_kernel:2.6.38 cpe:/h:ibm:infoprint_1754 Aggressive OS guesses: Lancom LCOS 8.00 (90%), Linux 2.6.38 (87%), IBM InfoPrint 1754 printer (86%) No exact OS matches for host (test conditions non-ideal). Nmap scan report for 85.142.160.63 Host is up (0.00036s latency). All 1000 scanned ports on 85.142.160.63 are filtered Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: general purpose Running: Microsoft Windows XP|7|2012 OS CPE: cpe:/o:microsoft:windows_xp::sp3 cpe:/o:microsoft:windows_7 cpe:/o:microsoft:windows_server_2012 OS details: Microsoft Windows XP SP3, Microsoft Windows XP SP3 or Windows 7 or Windows Server 2012 Nmap scan report for 85.142.160.96 Host is up (0.00071s latency). Not shown: 998 filtered ports PORT STATE SERVICE 1875/tcp closed westell-stats 8800/tcp closed sunwebadmin Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: specialized|general purpose|printer Running (JUST GUESSING): Lancom LCOS 8.X (90%), Linux 2.6.X (87%), IBM embedded (86%) OS CPE: cpe:/o:lancom:lcos:8.00 cpe:/o:linux:linux_kernel:2.6.38 cpe:/h:ibm:infoprint_1754 Aggressive OS guesses: Lancom LCOS 8.00 (90%), Linux 2.6.38 (87%), IBM InfoPrint 1754 printer (86%) No exact OS matches for host (test conditions non-ideal). Nmap scan report for 85.142.160.97 Host is up (0.15s latency). Not shown: 998 filtered ports PORT STATE SERVICE 9944/tcp closed unknown 44443/tcp closed coldfusion-auth Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: general purpose|printer|WAP Running (JUST GUESSING): Linux 2.6.X|2.4.X|3.X (89%), IBM embedded (89%), Actiontec embedded (86%) OS CPE: cpe:/o:linux:linux_kernel:2.6.38 cpe:/h:ibm:infoprint_1754 cpe:/h:actiontec:mi424wr-gen3i cpe:/o:linux:linux_kernel cpe:/o:linux:linux_kernel:2.4.37 cpe:/o:linux:linux_kernel:3.2 cpe:/o:linux:linux_kernel:4.4 Aggressive OS guesses: Linux 2.6.38 (89%), IBM InfoPrint 1754 printer (89%), Actiontec MI424WR-GEN3I WAP (86%), DD-WRT v24-sp2 (Linux 2.4.37) (86%), Linux 3.2 (86%), Linux 4.4 (86%) No exact OS matches for host (test conditions non-ideal). Nmap scan report for 85.142.160.99 Host is up (0.00040s latency). Not shown: 999 filtered ports PORT STATE SERVICE 9877/tcp closed unknown Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: specialized|general purpose|printer Running (JUST GUESSING): Lancom LCOS 8.X (90%), Linux 2.6.X (87%), IBM embedded (86%) OS CPE: cpe:/o:lancom:lcos:8.00 cpe:/o:linux:linux_kernel:2.6.38 cpe:/h:ibm:infoprint_1754 Aggressive OS guesses: Lancom LCOS 8.00 (90%), Linux 2.6.38 (87%), IBM InfoPrint 1754 printer (86%) No exact OS matches for host (test conditions non-ideal). Nmap scan report for 85.142.160.195 Host is up (0.00044s latency). Not shown: 999 filtered ports PORT STATE SERVICE 1277/tcp closed miva-mqs Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: specialized|general purpose|printer Running (JUST GUESSING): Lancom LCOS 8.X (90%), Linux 2.6.X (87%), IBM embedded (86%) OS CPE: cpe:/o:lancom:lcos:8.00 cpe:/o:linux:linux_kernel:2.6.38 cpe:/h:ibm:infoprint_1754 Aggressive OS guesses: Lancom LCOS 8.00 (90%), Linux 2.6.38 (87%), IBM InfoPrint 1754 printer (86%) No exact OS matches for host (test conditions non-ideal). Nmap scan report for 85.142.160.203 Host is up (0.0042s latency). Not shown: 999 filtered ports PORT STATE SERVICE 8800/tcp closed sunwebadmin Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: specialized|general purpose|printer Running (JUST GUESSING): Lancom LCOS 8.X (90%), Linux 2.6.X (87%), IBM embedded (86%) OS CPE: cpe:/o:lancom:lcos:8.00 cpe:/o:linux:linux_kernel:2.6.38 cpe:/h:ibm:infoprint_1754 Aggressive OS guesses: Lancom LCOS 8.00 (90%), Linux 2.6.38 (87%), IBM InfoPrint 1754 printer (86%) No exact OS matches for host (test conditions non-ideal). Nmap scan report for 85.142.160.225 Host is up (0.032s latency). Not shown: 997 filtered ports PORT STATE SERVICE 1084/tcp closed ansoft-lm-2 1111/tcp closed lmsocialserver 2725/tcp closed msolap-ptp2 Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: general purpose|printer|WAP Running (JUST GUESSING): Linux 2.6.X|2.4.X|3.X (89%), IBM embedded (89%), Actiontec embedded (86%) OS CPE: cpe:/o:linux:linux_kernel:2.6.38 cpe:/h:ibm:infoprint_1754 cpe:/h:actiontec:mi424wr-gen3i cpe:/o:linux:linux_kernel cpe:/o:linux:linux_kernel:2.4.37 cpe:/o:linux:linux_kernel:3.2 cpe:/o:linux:linux_kernel:4.4 Aggressive OS guesses: Linux 2.6.38 (89%), IBM InfoPrint 1754 printer (89%), Actiontec MI424WR-GEN3I WAP (86%), DD-WRT v24-sp2 (Linux 2.4.37) (86%), Linux 3.2 (86%), Linux 4.4 (86%) No exact OS matches for host (test conditions non-ideal). Nmap scan report for 85.142.160.226 Host is up (0.014s latency). Not shown: 997 filtered ports PORT STATE SERVICE 80/tcp open http 443/tcp open https 7777/tcp open cbt Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: general purpose|specialized Running: Microsoft Windows XP|7|2012, VMware Player OS CPE: cpe:/o:microsoft:windows_xp::sp3 cpe:/o:microsoft:windows_7 cpe:/o:microsoft:windows_server_2012 cpe:/a:vmware:player OS details: Microsoft Windows XP SP3, Microsoft Windows XP SP3 or Windows 7 or Windows Server 2012, VMware Player virtual NAT device Nmap scan report for 85.142.160.227 Host is up (0.00064s latency). Not shown: 999 filtered ports PORT STATE SERVICE 6123/tcp closed backup-express Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: specialized|general purpose|printer Running (JUST GUESSING): Lancom LCOS 8.X (90%), Linux 2.6.X (87%), IBM embedded (86%) OS CPE: cpe:/o:lancom:lcos:8.00 cpe:/o:linux:linux_kernel:2.6.38 cpe:/h:ibm:infoprint_1754 Aggressive OS guesses: Lancom LCOS 8.00 (90%), Linux 2.6.38 (87%), IBM InfoPrint 1754 printer (86%) No exact OS matches for host (test conditions non-ideal). Nmap scan report for 85.142.160.228 Host is up (0.00062s latency). Not shown: 999 filtered ports PORT STATE SERVICE 1051/tcp closed optima-vnet Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: specialized|general purpose|printer Running (JUST GUESSING): Lancom LCOS 8.X (90%), Linux 2.6.X (87%), IBM embedded (86%) OS CPE: cpe:/o:lancom:lcos:8.00 cpe:/o:linux:linux_kernel:2.6.38 cpe:/h:ibm:infoprint_1754 Aggressive OS guesses: Lancom LCOS 8.00 (90%), Linux 2.6.38 (87%), IBM InfoPrint 1754 printer (86%) No exact OS matches for host (test conditions non-ideal). Nmap scan report for 85.142.160.230 Host is up (0.00053s latency). Not shown: 999 filtered ports PORT STATE SERVICE 1213/tcp closed mpc-lifenet Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: specialized|general purpose|printer Running (JUST GUESSING): Lancom LCOS 8.X (90%), Linux 2.6.X (87%), IBM embedded (86%) OS CPE: cpe:/o:lancom:lcos:8.00 cpe:/o:linux:linux_kernel:2.6.38 cpe:/h:ibm:infoprint_1754 Aggressive OS guesses: Lancom LCOS 8.00 (90%), Linux 2.6.38 (87%), IBM InfoPrint 1754 printer (86%) No exact OS matches for host (test conditions non-ideal). Nmap scan report for 85.142.160.235 Host is up (0.00046s latency). Not shown: 999 filtered ports PORT STATE SERVICE 9877/tcp closed unknown Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: specialized|general purpose|printer Running (JUST GUESSING): Lancom LCOS 8.X (90%), Linux 2.6.X (87%), IBM embedded (86%) OS CPE: cpe:/o:lancom:lcos:8.00 cpe:/o:linux:linux_kernel:2.6.38 cpe:/h:ibm:infoprint_1754 Aggressive OS guesses: Lancom LCOS 8.00 (90%), Linux 2.6.38 (87%), IBM InfoPrint 1754 printer (86%) No exact OS matches for host (test conditions non-ideal). Nmap scan report for 85.142.160.246 Host is up (0.0010s latency). Not shown: 999 filtered ports PORT STATE SERVICE 5405/tcp closed pcduo Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: specialized|general purpose|printer Running (JUST GUESSING): Lancom LCOS 8.X (90%), Linux 2.6.X (87%), IBM embedded (86%) OS CPE: cpe:/o:lancom:lcos:8.00 cpe:/o:linux:linux_kernel:2.6.38 cpe:/h:ibm:infoprint_1754 Aggressive OS guesses: Lancom LCOS 8.00 (90%), Linux 2.6.38 (87%), IBM InfoPrint 1754 printer (86%) No exact OS matches for host (test conditions non-ideal). Nmap scan report for 85.142.161.105 Host is up (0.12s latency). Not shown: 994 filtered ports PORT STATE SERVICE 1043/tcp closed boinc 6699/tcp closed napster 8800/tcp closed sunwebadmin 20222/tcp closed ipulse-ics 27352/tcp closed unknown 32772/tcp closed sometimes-rpc7 Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: general purpose|printer|WAP Running (JUST GUESSING): Linux 2.6.X|2.4.X|3.X (89%), IBM embedded (89%), Actiontec embedded (86%) OS CPE: cpe:/o:linux:linux_kernel:2.6.38 cpe:/h:ibm:infoprint_1754 cpe:/h:actiontec:mi424wr-gen3i cpe:/o:linux:linux_kernel cpe:/o:linux:linux_kernel:2.4.37 cpe:/o:linux:linux_kernel:3.2 cpe:/o:linux:linux_kernel:4.4 Aggressive OS guesses: Linux 2.6.38 (89%), IBM InfoPrint 1754 printer (89%), Actiontec MI424WR-GEN3I WAP (86%), DD-WRT v24-sp2 (Linux 2.4.37) (86%), Linux 3.2 (86%), Linux 4.4 (86%) No exact OS matches for host (test conditions non-ideal). Nmap scan report for 85.142.161.117 Host is up (0.12s latency). Not shown: 993 filtered ports PORT STATE SERVICE 1039/tcp closed sbl 2161/tcp closed apc-agent 3128/tcp closed squid-http 3878/tcp closed fotogcad 5678/tcp closed rrac 5987/tcp closed wbem-rmi 7002/tcp closed afs3-prserver Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: general purpose|printer|WAP Running (JUST GUESSING): Linux 2.6.X|2.4.X|3.X (89%), IBM embedded (89%), Actiontec embedded (86%) OS CPE: cpe:/o:linux:linux_kernel:2.6.38 cpe:/h:ibm:infoprint_1754 cpe:/h:actiontec:mi424wr-gen3i cpe:/o:linux:linux_kernel cpe:/o:linux:linux_kernel:2.4.37 cpe:/o:linux:linux_kernel:3.2 cpe:/o:linux:linux_kernel:4.4 Aggressive OS guesses: Linux 2.6.38 (89%), IBM InfoPrint 1754 printer (89%), Actiontec MI424WR-GEN3I WAP (86%), DD-WRT v24-sp2 (Linux 2.4.37) (86%), Linux 3.2 (86%), Linux 4.4 (86%) No exact OS matches for host (test conditions non-ideal). Nmap scan report for 85.142.161.125 Host is up (0.00035s latency). Not shown: 999 filtered ports PORT STATE SERVICE 1080/tcp closed socks Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: specialized|general purpose|printer Running (JUST GUESSING): Lancom LCOS 8.X (90%), Linux 2.6.X (87%), IBM embedded (86%) OS CPE: cpe:/o:lancom:lcos:8.00 cpe:/o:linux:linux_kernel:2.6.38 cpe:/h:ibm:infoprint_1754 Aggressive OS guesses: Lancom LCOS 8.00 (90%), Linux 2.6.38 (87%), IBM InfoPrint 1754 printer (86%) No exact OS matches for host (test conditions non-ideal). Nmap scan report for Campus-D-4-FE-0-0-115.mirea.ru (85.142.161.225) Host is up (0.00040s latency). All 1000 scanned ports on Campus-D-4-FE-0-0-115.mirea.ru (85.142.161.225) are filtered Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port OS details: Actiontec MI424WR-GEN3I WAP, DD-WRT v24-sp2 (Linux 2.4.37), Linux 3.2, Linux 4.4, Microsoft Windows XP SP3, Microsoft Windows XP SP3 or Windows 7 or Windows Server 2012, VMware Player virtual NAT device Nmap scan report for remote.svan.ru (85.142.161.226) Host is up (0.00033s latency). All 1000 scanned ports on remote.svan.ru (85.142.161.226) are filtered Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port OS details: Actiontec MI424WR-GEN3I WAP, DD-WRT v24-sp2 (Linux 2.4.37), Linux 3.2, Linux 4.4, Microsoft Windows XP SP3, Microsoft Windows XP SP3 or Windows 7 or Windows Server 2012, VMware Player virtual NAT device ## Выполним сканирование с помощью Nessus ![Screenshdot 2024-03-12 212131](https://hackmd.io/_uploads/HyQHpM06p.png) ## Исследуем сайт https://ctf.mirea.tech/ ![Screenshot 2024-03-12 225243](https://hackmd.io/_uploads/Sy3hGN0aT.png) ## Вывод Роутрер CISCO PIX 7.0 Сайт подключения к роутеру ![Screenshot2024-03-12 212427](https://hackmd.io/_uploads/HkPx0MApa.png) Домены: Campus-D-4-FE-0-0-115.mirea.ru 85.142.161.225 remote.svan.ru 85.142.161.226 fti-tc.mirea.ru 85.142.160.40 rts-tc.mirea.ru 85.142.160.39 itht-tc.mirea.ru 85.142.160.38 idp-tc.mirea.ru 85.142.160.37 ivzo-tc.mirea.ru 85.142.160.36 iep-tc.mirea.ru 85.142.160.35 test.mirea.ru 85.142.160.1 mirea.tech 85.142.160.226 ptlab.ru 85.142.160.226 mirea.tech 85.142.160.226 www.mirea.tech 85.142.160.226 kb.mirea.tech 85.142.160.226 ctf.mirea.tech 85.142.160.226 Организация: Professional Education "Moscow State Institute of a Radio engineering, Electronics and Automatics" (MIREA) Адрес: Russian Federation, Moscow, Vernadskogo 78, 119454 Сотрудники: Дмитрий Маякошин Телефон: 7 499 6008228 Магомедов Шамиль Гасангусейнович Телефон: +7 499 681-33-56 доб. 6803 E-mail: magomedov_sh@mirea.ru Тягунов Алексей Томашевский Игорь Sergej U Sevryukov Ева Степушина Телефон: 74959874717 E-mail: it-train.ru@miltor.ru Игорь Дешко Телефон: 74959874717 74997399505 E-mail: users_id4172604@miltor.ru Батанов Арсений Олегович 16.09.1997 ТелефонЖ 74996008080 79154775409 E-mail: arseny.batanov@yandex.ru СНИЛС: 18229513678 Адрес: ОЗЕРНАЯ УЛ.Д.25 КВ.73; ОЗЕРНАЯ УЛ. Д.25 КВ.73 Адрес: Малоярославецкий р-й Калужской обл. (откуда/куда) Шумилова д.12 6-я Радиальная д.5к4 Б.Очаковская д.40 Паспорт: 4519353828 4599778171 Гос номер: Р882РТ799 https://vk.com/id18724560 https://instagram.com/arseny_batanov