Commit 4da64fbb authored by Your Name's avatar Your Name
Browse files

added Searchsploit utility

parent 22a0e0bc
#!/usr/bin/python3
#-*- coding:utf-8 -*-
# Init
def scan_nmap_top_15k(IP, file):
print("# Scan for service")
print("mkdir nmap")
print("sudo nmap -sS -sV -sC --top-port=15000 " + IP + " -oX " + file + ".xml | tee " + file)
print()
def scan_searchsploit(file):
print("# Scan for vulns")
print("searchsploit --nmap " + file + ".xml")
print()
def scan_FTP_annonymous_login(IP):
print("# Scan FTP Annonymous login")
print("ftp " + IP)
print("Name (10.129.230.162:kali): anonymous")
print("Password: <empty>")
print()
def scan_nmap_ftp(IP):
print("# Scan Nmap FTP")
print("sudo nmap --script ftp-* -p 21 " + IP)
print()
# Dirbuster
#
\ No newline at end of file
#!/usr/bin/python3
#-*- coding:utf-8 -*-
# Init
def run_proxy():
print("# Run the proxy")
print("sudo openvpn /home/kali/lab_AGS.ovpn")
print()
def add_IP_TO_ETC(IP, HOSTNAME):
print("# Add hostname IP to /etc/hosts")
print("cat /etc/hosts")
print("sudo echo \"" + str(IP) + "\t" + str(HOSTNAME)+"\" >> /etc/hosts")
print()
http://cap.htb// (Status: 200) [Size: 19386]
http://cap.htb//data/.html (Status: 302) [Size: 208] [--> http://cap.htb/]
http://cap.htb//data/.txt (Status: 302) [Size: 208] [--> http://cap.htb/]
http://cap.htb//data/.php (Status: 302) [Size: 208] [--> http://cap.htb/]
http://cap.htb//?q=user/register/ (Status: 200) [Size: 19386]
http://cap.htb//?q=user/login/.txt (Status: 200) [Size: 19386]
http://cap.htb//?q=user/password/.txt (Status: 200) [Size: 19386]
http://cap.htb//?q=search/.txt (Status: 200) [Size: 19386]
http://cap.htb//?q=node/add/ (Status: 200) [Size: 19386]
http://cap.htb//?q=admin/ (Status: 200) [Size: 19386]
http://cap.htb//?q=user/register/.html (Status: 200) [Size: 19386]
http://cap.htb//?q=comment/reply/ (Status: 200) [Size: 19386]
http://cap.htb//?q=user/login/.php (Status: 200) [Size: 19386]
http://cap.htb//?q=search/.php (Status: 200) [Size: 19386]
http://cap.htb//?q=user/password/.php (Status: 200) [Size: 19386]
http://cap.htb//?q=node/add/.html (Status: 200) [Size: 19386]
http://cap.htb//?q=admin/.html (Status: 200) [Size: 19386]
http://cap.htb//?q=user/register/.txt (Status: 200) [Size: 19386]
http://cap.htb//?q=comment/reply/.html (Status: 200) [Size: 19386]
http://cap.htb//?q=user/password/ (Status: 200) [Size: 19386]
http://cap.htb//?q=user/login/ (Status: 200) [Size: 19386]
http://cap.htb//?q=search/ (Status: 200) [Size: 19386]
http://cap.htb//?q=node/add/.txt (Status: 200) [Size: 19386]
http://cap.htb//?q=admin/.txt (Status: 200) [Size: 19386]
http://cap.htb//?q=user/register/.php (Status: 200) [Size: 19386]
http://cap.htb//?q=comment/reply/.txt (Status: 200) [Size: 19386]
http://cap.htb//?q=user/password/.html (Status: 200) [Size: 19386]
http://cap.htb//?q=user/login/.html (Status: 200) [Size: 19386]
http://cap.htb//?q=search/.html (Status: 200) [Size: 19386]
http://cap.htb//?q=node/add/.php (Status: 200) [Size: 19386]
http://cap.htb//?q=admin/.php (Status: 200) [Size: 19386]
http://cap.htb//?q=comment/reply/.php (Status: 200) [Size: 19386]
http://cap.htb//download/.txt (Status: 302) [Size: 208] [--> http://cap.htb/]
http://cap.htb//download/.php (Status: 302) [Size: 208] [--> http://cap.htb/]
http://cap.htb//download/.html (Status: 302) [Size: 208] [--> http://cap.htb/]
http://cap.htb//?q=user/logout/ (Status: 200) [Size: 19386]
http://cap.htb//?q=filter/tips/ (Status: 200) [Size: 19386]
http://cap.htb//?q=user/logout/.txt (Status: 200) [Size: 19386]
http://cap.htb//?q=filter/tips/.txt (Status: 200) [Size: 19386]
http://cap.htb//?level=12.php (Status: 200) [Size: 19386]
http://cap.htb//? (Status: 200) [Size: 19386]
http://cap.htb//?q=user/logout/.php (Status: 200) [Size: 19386]
http://cap.htb//?q=filter/tips/.php (Status: 200) [Size: 19386]
http://cap.htb//?level=12 (Status: 200) [Size: 19386]
http://cap.htb//?.txt (Status: 200) [Size: 19386]
http://cap.htb//?q=user/logout/.html (Status: 200) [Size: 19386]
http://cap.htb//?q=filter/tips/.html (Status: 200) [Size: 19386]
http://cap.htb//?.php (Status: 200) [Size: 19386]
http://cap.htb//?level=12.html (Status: 200) [Size: 19386]
http://cap.htb//?.html (Status: 200) [Size: 19386]
http://cap.htb//?level=12.txt (Status: 200) [Size: 19386]
http://cap.htb/?&what= (Status: 200) [Size: 19386]
http://cap.htb/?&what=.html (Status: 200) [Size: 19386]
http://cap.htb/?&what=.txt (Status: 200) [Size: 19386]
http://cap.htb/?&what=.php (Status: 200) [Size: 19386]
http://cap.htb//?q=logout/ (Status: 200) [Size: 19386]
http://cap.htb//?q=contact/ (Status: 200) [Size: 19386]
http://cap.htb//?q=*.php (Status: 200) [Size: 19386]
http://cap.htb//?q=logout/.txt (Status: 200) [Size: 19386]
http://cap.htb//?q=contact/.html (Status: 200) [Size: 19386]
http://cap.htb//?msk.php (Status: 200) [Size: 19386]
http://cap.htb//?q=*.html (Status: 200) [Size: 19386]
http://cap.htb//?q=logout/.php (Status: 200) [Size: 19386]
http://cap.htb//?q=contact/.txt (Status: 200) [Size: 19386]
http://cap.htb//?favorites (Status: 200) [Size: 19386]
http://cap.htb//?msk (Status: 200) [Size: 19386]
http://cap.htb//?*.html (Status: 200) [Size: 19386]
http://cap.htb//?q=* (Status: 200) [Size: 19386]
http://cap.htb//?q=logout/.html (Status: 200) [Size: 19386]
http://cap.htb//?q=contact/.php (Status: 200) [Size: 19386]
http://cap.htb//?favorites.html (Status: 200) [Size: 19386]
http://cap.htb//?msk.html (Status: 200) [Size: 19386]
http://cap.htb//?*.txt (Status: 200) [Size: 19386]
http://cap.htb//?q=*.txt (Status: 200) [Size: 19386]
http://cap.htb//?favorites.txt (Status: 200) [Size: 19386]
http://cap.htb//?msk.txt (Status: 200) [Size: 19386]
http://cap.htb//?*.php (Status: 200) [Size: 19386]
http://cap.htb//?favorites.php (Status: 200) [Size: 19386]
http://cap.htb//?* (Status: 200) [Size: 19386]
http://cap.htb/capture (Status: 302) [Size: 220] [--> http://cap.htb/data/8]
http://cap.htb/data (Status: 302) [Size: 208] [--> http://cap.htb/]
http://cap.htb/ip (Status: 200) [Size: 17376]
http://cap.htb/netstat (Status: 200) [Size: 29724]
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
<title>404 Not Found</title>
<h1>Not Found</h1>
<p>The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.</p>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
<title>404 Not Found</title>
<h1>Not Found</h1>
<p>The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.</p>
Scanning from: http://cap.htb
Dl: http://cap.htb
'link: http://cap.htb/'
'link: http://cap.htb/capture'
'link: http://cap.htb/ip'
'link: http://cap.htb/netstat'
Dl: http://cap.htb/netstat
'link: http://cap.htb/netstat'
Dl: http://cap.htb/netstat
Dl: http://cap.htb/ip
'link: http://cap.htb/ip'
'link: http://cap.htb/netstat'
Dl: http://cap.htb/netstat
Dl: http://cap.htb/ip
Dl: http://cap.htb/capture
'link: http://cap.htb/capture'
'link: http://cap.htb/ip'
'link: http://cap.htb/netstat'
Dl: http://cap.htb/netstat
Dl: http://cap.htb/ip
Dl: http://cap.htb/capture
Dl: http://cap.htb/
'link: http://cap.htb/'
'link: http://cap.htb/capture'
'link: http://cap.htb/ip'
'link: http://cap.htb/netstat'
Dl: http://cap.htb/netstat
Dl: http://cap.htb/ip
Dl: http://cap.htb/capture
Dl: http://cap.htb/
==================================
Nb links visited: 5
http://cap.htb
http://cap.htb/
http://cap.htb/capture
http://cap.htb/ip
http://cap.htb/netstat
#!/usr/bin/python3
#-*- coding:utf-8 -*-
import Auto_recon_setup
import Auto_recon_service_scan
import argparse
from pprint import pprint
parser = argparse.ArgumentParser(description='Nothing do script to for pentest')
parser.add_argument('hostname', help='hostname of the HTB box')
parser.add_argument('IP', help='IP of the HTB box')
parser.add_argument('-n', help='Step of processus', type=int, default=0)
args = parser.parse_args()
if __name__ == "__main__":
# Init
if args.n == 0:
Auto_recon_setup.run_proxy()
print("Step: " + str(args.n))
input("enter to next step\n")
args.n += 1
if args.n == 1:
Auto_recon_setup.add_IP_TO_ETC(args.hostname, args.IP)
print("Step: " + str(args.n))
input("enter to next step\n")
args.n += 1
if args.n == 2:
Auto_recon_service_scan.scan_nmap_top_15k(args.IP, "nmap/top15k")
print("Step: " + str(args.n))
input("enter to next step\n")
args.n += 1
if args.n == 3:
Auto_recon_service_scan.scan_searchsploit("nmap/top15k")
print("Step: " + str(args.n))
input("enter to next step\n")
args.n += 1
if args.n == 4:
Auto_recon_service_scan.scan_FTP_annonymous_login(args.IP)
print("Step: " + str(args.n))
input("enter to next step\n")
args.n += 1
if args.n == 5:
Auto_recon_service_scan.scan_nmap_ftp(args.IP)
print("Step: " + str(args.n))
input("enter to next step\n")
args.n += 1
\ No newline at end of file
#!/bin/bash
source utils.sh
source colors.sh
!!§!# Setup
echo -e "[*] Param checking\n"
if [ "$(id -u)" != "0" ]; then
echo -e "\t[!] This script must be run as root" 1>&2
echo -e "sudo $0 IP DOMAIN_NAME"
exit 1
if [ -n "$1" ]; then
IP=$1
else
echo -e "\t[!] Missing arg#1: IP"
exit -1
fi
if [ -n "$2" ]; then
DOM_NAME=$2
else
echo -e "\t[!] Missing arg#1: DOMAIN_NAME"
exit -1
fi
# Ping Scan
echo -e "[*] Connectivity check\n"
if ping -c 4 > /dev/null $IP
then
echo -e "\t[*] Ping scan OK"
else
echo -e "\t[*] Ping scan KO"
exit -1
fi
# Adding IP to /etc/hosts
echo -e "[*] Setup /etc/hosts\n"
## Check if /etc/hosts contains domain name
if cat /etc/hosts | grep $DOM_NAME > /dev/null
then
# Check if domain name AND Ip are the same
if cat /etc/hosts | grep $DOM_NAME | cut -d$'\t' -f 1| grep $IP > /dev/null
then
# If Yes do nothing
echo -e "\t[*] Same IP and Same hostname"
else
# Else add a line into /etc/hosts
current_ip=$(cat /etc/hosts | grep $DOM_NAME | cut -d$'\t' -f1)
new_ip=$IP
sed -i "s/$current_ip/$new_ip/g" /etc/hosts
echo -e "\t[*] Adding line to /etc/hosts for same host but new IP"
fi
else
# If /etc/hosts don't contain data: add it
echo -e "$IP\t$DOM_NAME" >> /etc/hosts
echo -e "\t[*] Adding line to /etc/hosts (new host)"
fi
# Scan service
echo -e "[*] Scanning service\n"
mkdir nmap_scans 2>/dev/null
file_nmap_scan_init="nmap_scans/nmap_top_15k_ports"
if test -f "$file_nmap_scan_init"; then
echo "$file_nmap_scan_init exists."
else
nmap -sS -sV -sC --top-port=15000 $IP -oX $file_nmap_scan_init".xml" | tee $file_nmap_scan_init
fi
## Open Ports
echo -e "\t[*] open services"
file_open_services_banner="nmap_scans/open_services_banner"
cat $file_nmap_scan_init | grep -E "[0-9].\/tcp|udp" | tee $file_open_services_banner
## Search for vulnerability
echo -e "[*] search for vulns\n"
cmd="searchsploit --nmap $file_nmap_scan_init.xml"
savefile="searchsploit_init"
#run_prog_in_another_tab "$cmd" "$savefile"
searchsploit --nmap $file_nmap_scan_init.xml
## Si service FTP
## Si service SSH
## Si service HTTP
if cat $file_open_services_banner | grep 80/tcp > /dev/null
then
echo -e "[*] Spider web\n"
cmd="python3 /opt/MyOwnPentestToolsByAGS/SimpleSpider.py http://$DOM_NAME"
savefile="Web/spideredLinks.txt"
#run_prog_in_another_tab "$cmd" "$savefile"
echo "#########"
echo "# spider #"
echo "#########"
if test -f "$savefile"; then
echo "$savefile exists."
else
python3 /opt/MyOwnPentestToolsByAGS/SimpleSpider.py http://$DOM_NAME | tee $savefile
fi
echo -e "[*] Run firefox & burp\n"
burpsuite&
firefox -proxy-server 127.0.0.1 -proxy-port 8080 http://$DOM_NAME/ &
echo -e "[*] Dirbuster\n"
echo -e "\t[*] big.txt (from seclist)"
echo "#########"
echo "# gobuster #"
echo "#########"
savefile="Web/gobuster_big.txt"
if test -f "$savefile"; then
echo "$savefile exists."
else
gobuster dir -u $DOM_NAME -w /opt/SecLists/Discovery/Web-Content/big.txt -e -s '200,301,302,401' -x 'html,txt,php' -t 15 -o $savefile
echo "saved results as $savefile"
fi
echo "#########"
echo "# gobuster #"
echo "#########"
echo -e "\t[*] RobotsDisallowed (from seclist)"
savefile="Web/RobotsDisallowed-Top1000.txt"
if test -f "$savefile"; then
echo "$savefile exists."
else
gobuster dir -u $DOM_NAME -w /opt/SecLists/Discovery/Web-Content/RobotsDisallowed-Top1000.txt -e -s '200,301,302,401' -x 'html,txt,php' -t 15 -o $savefile
echo "saved results as $savefile"
fi
# Vhost enum
echo -e "[*] Vhost enum (from seclist)\n"
savefile="Web/vhost_enum.txt"
if test -f "$savefile"; then
echo "$savefile exists."
else
gobuster vhost --url $DOM_NAME --wordlist /opt/SecLists/Discovery/DNS/subdomains-top1million-110000.txt -t 15 -o $savefile
fi
# robots.txt enum
echo -e "[*] Robot txt check\n"
cmd="curl http://$DOM_NAME/robots.txt"
savefile="Web/robot.txt"
#run_prog_in_another_tab "$cmd" "$savefile"
fiu_4u7
## Password
\ No newline at end of file
WID=$(xprop -root | grep "_NET_ACTIVE_WINDOW(WINDOW)"| awk '{print $5}')
xdotool windowfocus $WID
xdotool key ctrl+shift+t
xdotool type "mkdir Web"
xdotool key Return
xdotool type "python3 /opt/MyOwnPentestToolsByAGS/SimpleSpider.py http://$DOM_NAME | tee Web/spideredLinks.txt"
xdotool key Return
WID=$(xprop -root | grep "_NET_ACTIVE_WINDOW(WINDOW)"| awk '{print $5}')
xdotool windowfocus $WID
xdotool key ctrl+shift+t
xdotool type "mkdir Web"
xdotool key Return
xdotool type "python3 /opt/MyOwnPentestToolsByAGS/SimpleSpider.py http://$DOM_NAME | tee Web/spideredLinks.txt"
xdotool key Return
echo "Next"
\ No newline at end of file
# Reset
Color_Off='\033[0m' # Text Reset
# Regular Colors
Black='\033[0;30m' # Black
Red='\033[0;31m' # Red
Green='\033[0;32m' # Green
Yellow='\033[0;33m' # Yellow
Blue='\033[0;34m' # Blue
Purple='\033[0;35m' # Purple
Cyan='\033[0;36m' # Cyan
White='\033[0;37m' # White
\ No newline at end of file
http://cap.htb/data (Status: 302) [Size: 208] [--> http://cap.htb/]
http://cap.htb/netstat (Status: 200) [Size: 28667]
Starting Nmap 7.91 ( https://nmap.org ) at 2021-09-29 04:50 EDT
Nmap scan report for 10.129.230.5
Host is up (0.20s latency).
Not shown: 8337 closed ports
PORT STATE SERVICE VERSION
21/tcp open ftp vsftpd 3.0.3
22/tcp open ssh OpenSSH 8.2p1 Ubuntu 4ubuntu0.2 (Ubuntu Linux; protocol 2.0)
| ssh-hostkey:
| 3072 fa:80:a9:b2:ca:3b:88:69:a4:28:9e:39:0d:27:d5:75 (RSA)
| 256 96:d8:f8:e3:e8:f7:71:36:c5:49:d5:9d:b6:a4:c9:0c (ECDSA)
|_ 256 3f:d0:ff:91:eb:3b:f6:e1:9f:2e:8d:de:b3:de:b2:18 (ED25519)
80/tcp open http gunicorn
| fingerprint-strings:
| FourOhFourRequest:
| HTTP/1.0 404 NOT FOUND
| Server: gunicorn
| Date: Wed, 29 Sep 2021 08:52:19 GMT
| Connection: close
| Content-Type: text/html; charset=utf-8
| Content-Length: 232
| <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
| <title>404 Not Found</title>
| <h1>Not Found</h1>
| <p>The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.</p>
| GetRequest:
| HTTP/1.0 200 OK
| Server: gunicorn
| Date: Wed, 29 Sep 2021 08:52:13 GMT
| Connection: close
| Content-Type: text/html; charset=utf-8
| Content-Length: 19386
| <!DOCTYPE html>
| <html class="no-js" lang="en">
| <head>
| <meta charset="utf-8">
| <meta http-equiv="x-ua-compatible" content="ie=edge">
| <title>Security Dashboard</title>
| <meta name="viewport" content="width=device-width, initial-scale=1">
| <link rel="shortcut icon" type="image/png" href="/static/images/icon/favicon.ico">
| <link rel="stylesheet" href="/static/css/bootstrap.min.css">
| <link rel="stylesheet" href="/static/css/font-awesome.min.css">
| <link rel="stylesheet" href="/static/css/themify-icons.css">
| <link rel="stylesheet" href="/static/css/metisMenu.css">
| <link rel="stylesheet" href="/static/css/owl.carousel.min.css">
| <link rel="stylesheet" href="/static/css/slicknav.min.css">
| <!-- amchar
| HTTPOptions:
| HTTP/1.0 200 OK
| Server: gunicorn
| Date: Wed, 29 Sep 2021 08:52:13 GMT
| Connection: close
| Content-Type: text/html; charset=utf-8
| Allow: GET, HEAD, OPTIONS
| Content-Length: 0
| RTSPRequest:
| HTTP/1.1 400 Bad Request
| Connection: close
| Content-Type: text/html
| Content-Length: 196
| <html>
| <head>
| <title>Bad Request</title>
| </head>
| <body>
| <h1><p>Bad Request</p></h1>
| Invalid HTTP Version &#x27;Invalid HTTP Version: &#x27;RTSP/1.0&#x27;&#x27;
| </body>
|_ </html>
|_http-server-header: gunicorn
|_http-title: Security Dashboard
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.91%I=7%D=9/29%Time=6154293D%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,2555,"HTTP/1\.0\x20200\x20OK\r\nServer:\x20gunicorn\r\nDate:\x20
SF:Wed,\x2029\x20Sep\x202021\x2008:52:13\x20GMT\r\nConnection:\x20close\r\
SF:nContent-Type:\x20text/html;\x20charset=utf-8\r\nContent-Length:\x20193
SF:86\r\n\r\n<!DOCTYPE\x20html>\n<html\x20class=\"no-js\"\x20lang=\"en\">\
SF:n\n<head>\n\x20\x20\x20\x20<meta\x20charset=\"utf-8\">\n\x20\x20\x20\x2
SF:0<meta\x20http-equiv=\"x-ua-compatible\"\x20content=\"ie=edge\">\n\x20\
SF:x20\x20\x20<title>Security\x20Dashboard</title>\n\x20\x20\x20\x20<meta\
SF:x20name=\"viewport\"\x20content=\"width=device-width,\x20initial-scale=
SF:1\">\n\x20\x20\x20\x20<link\x20rel=\"shortcut\x20icon\"\x20type=\"image
SF:/png\"\x20href=\"/static/images/icon/favicon\.ico\">\n\x20\x20\x20\x20<
SF:link\x20rel=\"stylesheet\"\x20href=\"/static/css/bootstrap\.min\.css\">
SF:\n\x20\x20\x20\x20<link\x20rel=\"stylesheet\"\x20href=\"/static/css/fon
SF:t-awesome\.min\.css\">\n\x20\x20\x20\x20<link\x20rel=\"stylesheet\"\x20
SF:href=\"/static/css/themify-icons\.css\">\n\x20\x20\x20\x20<link\x20rel=
SF:\"stylesheet\"\x20href=\"/static/css/metisMenu\.css\">\n\x20\x20\x20\x2
SF:0<link\x20rel=\"stylesheet\"\x20href=\"/static/css/owl\.carousel\.min\.
SF:css\">\n\x20\x20\x20\x20<link\x20rel=\"stylesheet\"\x20href=\"/static/c
SF:ss/slicknav\.min\.css\">\n\x20\x20\x20\x20<!--\x20amchar")%r(HTTPOption
SF:s,B3,"HTTP/1\.0\x20200\x20OK\r\nServer:\x20gunicorn\r\nDate:\x20Wed,\x2
SF:029\x20Sep\x202021\x2008:52:13\x20GMT\r\nConnection:\x20close\r\nConten
SF:t-Type:\x20text/html;\x20charset=utf-8\r\nAllow:\x20GET,\x20HEAD,\x20OP
SF:TIONS\r\nContent-Length:\x200\r\n\r\n")%r(RTSPRequest,121,"HTTP/1\.1\x2
SF:0400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Type:\x20text
SF:/html\r\nContent-Length:\x20196\r\n\r\n<html>\n\x20\x20<head>\n\x20\x20
SF:\x20\x20<title>Bad\x20Request</title>\n\x20\x20</head>\n\x20\x20<body>\
SF:n\x20\x20\x20\x20<h1><p>Bad\x20Request</p></h1>\n\x20\x20\x20\x20Invali
SF:d\x20HTTP\x20Version\x20&#x27;Invalid\x20HTTP\x20Version:\x20&#x27;RTSP
SF:/1\.0&#x27;&#x27;\n\x20\x20</body>\n</html>\n")%r(FourOhFourRequest,189
SF:,"HTTP/1\.0\x20404\x20NOT\x20FOUND\r\nServer:\x20gunicorn\r\nDate:\x20W
SF:ed,\x2029\x20Sep\x202021\x2008:52:19\x20GMT\r\nConnection:\x20close\r\n
SF:Content-Type:\x20text/html;\x20charset=utf-8\r\nContent-Length:\x20232\
SF:r\n\r\n<!DOCTYPE\x20HTML\x20PUBLIC\x20\"-//W3C//DTD\x20HTML\x203\.2\x20
SF:Final//EN\">\n<title>404\x20Not\x20Found</title>\n<h1>Not\x20Found</h1>
SF:\n<p>The\x20requested\x20URL\x20was\x20not\x20found\x20on\x20the\x20ser
SF:ver\.\x20If\x20you\x20entered\x20the\x20URL\x20manually\x20please\x20ch
SF:eck\x20your\x20spelling\x20and\x20try\x20again\.</p>\n");
Service Info: OSs: Unix, Linux; CPE: cpe:/o:linux:linux_kernel
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 212.79 seconds
Starting Nmap 7.91 ( https://nmap.org ) at 2021-09-29 06:12 EDT
Nmap scan report for cap.htb (10.129.230.5)
Host is up (0.11s latency).
Not shown: 8337 closed ports
PORT STATE SERVICE VERSION
21/tcp open ftp vsftpd 3.0.3
22/tcp open ssh OpenSSH 8.2p1 Ubuntu 4ubuntu0.2 (Ubuntu Linux; protocol 2.0)
| ssh-hostkey:
| 3072 fa:80:a9:b2:ca:3b:88:69:a4:28:9e:39:0d:27:d5:75 (RSA)
| 256 96:d8:f8:e3:e8:f7:71:36:c5:49:d5:9d:b6:a4:c9:0c (ECDSA)
|_ 256 3f:d0:ff:91:eb:3b:f6:e1:9f:2e:8d:de:b3:de:b2:18 (ED25519)
80/tcp open http gunicorn
| fingerprint-strings:
| FourOhFourRequest:
| HTTP/1.0 404 NOT FOUND
| Server: gunicorn
| Date: Wed, 29 Sep 2021 10:13:27 GMT
| Connection: close
| Content-Type: text/html; charset=utf-8
| Content-Length: 232
| <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
| <title>404 Not Found</title>
| <h1>Not Found</h1>
| <p>The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.</p>
| GetRequest:
| HTTP/1.0 200 OK
| Server: gunicorn
| Date: Wed, 29 Sep 2021 10:13:21 GMT
| Connection: close
| Content-Type: text/html; charset=utf-8
| Content-Length: 19386
| <!DOCTYPE html>
| <html class="no-js" lang="en">
| <head>
| <meta charset="utf-8">
| <meta http-equiv="x-ua-compatible" content="ie=edge">
| <title>Security Dashboard</title>
| <meta name="viewport" content="width=device-width, initial-scale=1">
| <link rel="shortcut icon" type="image/png" href="/static/images/icon/favicon.ico">
| <link rel="stylesheet" href="/static/css/bootstrap.min.css">
| <link rel="stylesheet" href="/static/css/font-awesome.min.css">
| <link rel="stylesheet" href="/static/css/themify-icons.css">
| <link rel="stylesheet" href="/static/css/metisMenu.css">
| <link rel="stylesheet" href="/static/css/owl.carousel.min.css">
| <link rel="stylesheet" href="/static/css/slicknav.min.css">
| <!-- amchar
| HTTPOptions:
| HTTP/1.0 200 OK
| Server: gunicorn
| Date: Wed, 29 Sep 2021 10:13:21 GMT
| Connection: close
| Content-Type: text/html; charset=utf-8
| Allow: GET, HEAD, OPTIONS
| Content-Length: 0
| RTSPRequest:
| HTTP/1.1 400 Bad Request
| Connection: close
| Content-Type: text/html
| Content-Length: 196
| <html>
| <head>
| <title>Bad Request</title>
| </head>
| <body>
| <h1><p>Bad Request</p></h1>
| Invalid HTTP Version &#x27;Invalid HTTP Version: &#x27;RTSP/1.0&#x27;&#x27;
| </body>
|_ </html>
|_http-server-header: gunicorn
|_http-title: Security Dashboard
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.91%I=7%D=9/29%Time=61543C41%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,2A94,"HTTP/1\.0\x20200\x20OK\r\nServer:\x20gunicorn\r\nDate:\x20
SF:Wed,\x2029\x20Sep\x202021\x2010:13:21\x20GMT\r\nConnection:\x20close\r\
SF:nContent-Type:\x20text/html;\x20charset=utf-8\r\nContent-Length:\x20193
SF:86\r\n\r\n<!DOCTYPE\x20html>\n<html\x20class=\"no-js\"\x20lang=\"en\">\
SF:n\n<head>\n\x20\x20\x20\x20<meta\x20charset=\"utf-8\">\n\x20\x20\x20\x2
SF:0<meta\x20http-equiv=\"x-ua-compatible\"\x20content=\"ie=edge\">\n\x20\
SF:x20\x20\x20<title>Security\x20Dashboard</title>\n\x20\x20\x20\x20<meta\
SF:x20name=\"viewport\"\x20content=\"width=device-width,\x20initial-scale=
SF:1\">\n\x20\x20\x20\x20<link\x20rel=\"shortcut\x20icon\"\x20type=\"image