Open your Nessus and scan your target.įrom Nessus scan results, seen a lot of vulnerability in there. Nmap done: 1 IP address (1 host up) scanned in 25.11 secondsįrom the first section, We will procced to the Service Enumeration |_smbv2-enabled: Server doesn't support SMBv2 protocol |_ Message signing disabled (dangerous, but default) | SMB Security: Challenge/response passwords supported | Account that was used for smb scripts: guest |_nbstat: NetBIOS name: UBUNTUVM, NetBIOS user:, NetBIOS MAC: Service Info: OS: Linux CPE: cpe:/o:linux:kernel |_http-title: Site doesn't have a title (text/html Charset=iso-8859-1).

|_http-methods: No Allow or Public header in OPTIONS response (status code 200)ġ39/tcp open netbios-ssn Samba smbd 3.X (workgroup: MSHOME)Ĥ45/tcp open netbios-ssn Samba smbd 3.X (workgroup: MSHOME)ġ0000/tcp open http MiniServ 0.01 (Webmin httpd) |_http-title: Site doesn't have a title (text/html). Starting Nmap 5.61TEST4 ( ) at 10:46 WITĢ2/tcp open ssh OpenSSH 4.6p1 Debian 5build1 (protocol 2.0) In this section I will collecting some information from target using nmap -sS -A -p10-10000 192.168.56.101 Posted by shinigami at 07:46 Read our previous postīefore doing an attack, we need to run some job (hacking framework).

Brute force ssh 5720.py