# even Flow

PORT STATE SERVICE VERSION
22/tcp open ssh OpenSSH 8.2p1 Ubuntu 4ubuntu0.2 (Ubuntu Linux; protocol 2.0)
| ssh-hostkey:
| 3072 4b:89:47:39:67:3d:07:31:5e:3f:4c:27:41:1f:f9:67 (RSA)
| 256 04:a7:4f:39:95:65:c5:b0:8d:d5:49:2e:d8:44:00:36 (ECDSA)
|_ 256 b4:5e:83:93:c5:42:49:de:71:25:92:71:23:b1:85:54 (ED25519)
8000/tcp open http Gunicorn 20.0.4
| http-methods:
|_ Supported Methods: OPTIONS HEAD GET
|_http-server-header: gunicorn/20.0.4
| http-title: Airflow
|_Requested resource was http://10.129.172.210:8000/login/?next=http%3A%2F%2F10.129.172.210%3A8000%2Fhome
8080/tcp open http Jetty 9.4.39.v20210325
|_http-favicon: Unknown favicon MD5: 23E8C7BD78E8CD826C5A6073B15068B1
| http-robots.txt: 1 disallowed entry
|_/
|_http-server-header: Jetty(9.4.39.v20210325)
|_http-title: Site doesn't have a title (text/html;charset=utf-8).
Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel

NSE: Script Post-scanning.
Initiating NSE at 16:19
Completed NSE at 16:19, 0.00s elapsed
Initiating NSE at 16:19
Completed NSE at 16:19, 0.00s elapsed
Initiating NSE at 16:19
Completed NSE at 16:19, 0.00s elapsed
Read data files from: /usr/bin/../share/nmap
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 196.68 seconds

AirFlow
https://www.exploit-db.com/exploits/49927

AirFlow login - Default creds don't work
http://flow.htb:8000/login/

Jenkins - Default creds don't work
http://flow.htb:8080/