# Basic Nmap

kali@kali:~$ sudo nmap -p- -T4 172.15.1.117
Starting Nmap 7.80 ( https://nmap.org ) at 2020-12-04 15:12 UTC
Nmap scan report for 172.15.1.117
Host is up (0.00051s latency).
Not shown: 65515 closed ports
PORT     STATE SERVICE
80/tcp   open  http                  - 4 Сърца - done
1080/tcp open  socks                 - 8 Каро - done
1337/tcp open  waste                 - 9 Спатия - done
4545/tcp open  worldscores           - 8 Сърца - done
5555/tcp open  freeciv               - 8 Каро - done
6868/tcp open  acctopus-cc           - 6 Сърца - done
8080/tcp open  http-proxy            - 3 Пика - done
8092/tcp open  unknown               - 4 Спатия - done
8101/tcp open  ldoms-migr            - 5 Спатия - done
8123/tcp open  polipo                - Черен Петър - done
8200/tcp open  trivnet1              - 6 Каро - done
8201/tcp open  trivnet2              - 9 Каро - done
8202/tcp open  aesop                 - Дама Пика - done
8888/tcp open  sun-answerbook        - 7 пика - done 
9000/tcp open  cslistener            - 2 купа - done
9001/tcp open  tor-orport            - 2 Пика - done
9007/tcp open  ogs-client            - Червен Жокер - done
9008/tcp open  ogs-server            - Дама Купа (сървър) - done
9009/tcp open  pichat                - Асо Спатия - done
9010/tcp open  sdr                   - Дама Купа (клиент) - done

# UDP ports

PORT      STATE         SERVICE
53/udp    open          domain - done
68/udp    open|filtered dhcpc
9001/udp  open|filtered etlservicemgr
33872/udp open|filtered unknown

# TCP Ports

# Nmap 7.80 scan initiated Fri Dec  4 15:13:51 2020 as: nmap -p 1080,1337,4545,5555,6868,8080,8092,8101,8123,8200,8201,8202,8888,9000,9001,9007,9008,9009,9010 -sV -sC -oA tcp_ports 172.15.1.117
Nmap scan report for 172.15.1.117
Host is up (0.00054s latency).

PORT     STATE SERVICE     VERSION
1080/tcp open  socks5      (No authentication; connection failed)
| socks-auth-info: 
|_  No authentication
1337/tcp open  waste?
| fingerprint-strings: 
|   GenericLines, GetRequest, HTTPOptions, RTSPRequest: 
|     Welcome to the '9 of Clubs' service.
|     -------------------------------
|     Please choose an option:
|     Send contact info
|     Greetings
|     Send feedback
|     Exit
|     Unknown option.
|     Welcome to the '9 of Clubs' service.
|     -------------------------------
|     Please choose an option:
|     Send contact info
|     Greetings
|     Send feedback
|     Exit
|   NULL: 
|     Welcome to the '9 of Clubs' service.
|     -------------------------------
|     Please choose an option:
|     Send contact info
|     Greetings
|     Send feedback
|_    Exit
4545/tcp open  http        SimpleHTTPServer 0.6 (Python 3.8.5)
|_http-server-header: SimpleHTTP/0.6 Python/3.8.5
|_http-title: Directory listing for /
5555/tcp open  telnet
| fingerprint-strings: 
|   NULL: 
|     [HSCORE: 0
|     [HSCORE: 1
|     [HSCORE: 2
|     [HSCORE: 3
|_    [HSCORE: 4
6868/tcp open  http        WSGIServer 0.2 (Python 3.8.5)
|_http-server-header: WSGIServer/0.2 CPython/3.8.5
|_http-title: Photos5u
8080/tcp open  http        Apache httpd 2.4.38 ((Debian))
|_http-open-proxy: Proxy might be redirecting requests
|_http-server-header: Apache/2.4.38 (Debian)
|_http-title: Site doesn't have a title (text/html).
8092/tcp open  http        Apache httpd 2.4.38 ((Debian))
|_http-server-header: Apache/2.4.38 (Debian)
|_http-title: Site doesn't have a title (text/html; charset=UTF-8).
8101/tcp open  http        Apache httpd 2.4.38 ((Debian))
|_http-server-header: Apache/2.4.38 (Debian)
|_http-title: 5 of Clubs Frontend
8123/tcp open  http        WSGIServer 0.2 (Python 3.8.5)
|_http-server-header: WSGIServer/0.2 CPython/3.8.5
|_http-title: Salt Free Hashes
8200/tcp open  http        Apache httpd 2.4.38 ((Debian))
|_http-server-header: Apache/2.4.38 (Debian)
|_http-title: Home
8201/tcp open  http        nginx 1.19.5
|_http-server-header: nginx/1.19.5
|_http-title: Did not follow redirect to http://intranet.metasploit.ctf:8201
8202/tcp open  http        nginx 1.19.5
|_http-server-header: nginx/1.19.5
|_http-title: Site doesn't have a title (text/html).
8888/tcp open  http        Werkzeug httpd 1.0.1 (Python 3.8.5)
|_http-title: Home
9000/tcp open  http        WEBrick httpd 1.6.0 (Ruby 2.7.0 (2019-12-25))
|_http-server-header: WEBrick/1.6.0 (Ruby/2.7.0/2019-12-25)
|_http-title: Site doesn't have a title (text/html;charset=utf-8).
9001/tcp open  http        Thin httpd
|_http-server-header: thin
|_http-title: CtfChallenge
9007/tcp open  http        Apache httpd 2.4.46 ((Unix))
| http-methods: 
|_  Potentially risky methods: TRACE
|_http-server-header: Apache/2.4.46 (Unix)
|_http-title: Index of /
9008/tcp open  java-object Java Object Serialization
9009/tcp open  ssh         OpenSSH 7.6p1 Ubuntu 4ubuntu0.3 (Ubuntu Linux; protocol 2.0)
| ssh-hostkey: 
|   2048 4c:0f:d8:c5:a2:f1:54:f9:92:30:df:62:1f:52:e6:fe (RSA)
|   256 6e:b8:6f:94:e6:c0:2f:15:0c:80:71:32:cb:d0:2a:00 (ECDSA)
|_  256 8a:55:03:98:8e:87:29:50:66:1a:57:4c:5b:10:a4:01 (ED25519)
9010/tcp open  http        Apache httpd 2.4.38
| http-ls: Volume /
| SIZE  TIME              FILENAME
| 3.2K  2020-12-01 15:29  QOH_Client.jar
|_
|_http-server-header: Apache/2.4.38 (Debian)
|_http-title: Index of /