# Scanning and Enumeration

## Scanning&#x20;

```bash
kali@kali:~$ nmap -sV -p- 10.10.10.75 
PORT   STATE SERVICE VERSION
22/tcp open  ssh     OpenSSH 7.2p2 Ubuntu 4ubuntu2.2 (Ubuntu Linux; protocol 2.0)
80/tcp open  http    Apache httpd 2.4.18 ((Ubuntu))
Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel

```

## Enumeration

### Port 22

![Vulnerable to Username Enumeration](https://4057777515-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MHH7KhyMHFxZjjhb__O%2F-MHLiKJYPdn57tulwbRk%2F-MHLj2C05yd3YeXIq2NB%2Fimage.png?alt=media\&token=c01e629d-5146-47d8-9b25-9789049a10c2)

### ​Port 80

![Webpage for nibbles](https://4057777515-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MHH7KhyMHFxZjjhb__O%2F-MHLiKJYPdn57tulwbRk%2F-MHLk9Wrj8R0Nf1uUEui%2Fimage.png?alt=media\&token=f2d20678-37f6-4d7b-b4a5-fb315f88624d)

#### Gobuster Scan

![](https://4057777515-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MHH7KhyMHFxZjjhb__O%2F-MHLiKJYPdn57tulwbRk%2F-MHLz8_AAwC1-ogjVDuU%2Fimage.png?alt=media\&token=888d5607-c30e-4f08-9fa9-aac289a90fe4)

![](https://4057777515-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MHH7KhyMHFxZjjhb__O%2F-MHLiKJYPdn57tulwbRk%2F-MHLyriy78OUC4qkEtfu%2Fimage.png?alt=media\&token=b6a5b64c-8a55-44eb-acf1-2ad48cbeac6e)

#### Nibbles Login

* Login page available /admin.php
* uploads available on

![](https://4057777515-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MHH7KhyMHFxZjjhb__O%2F-MHNQGgag3jPPw0szqEy%2F-MHNT7G6Y1PSKkawss5i%2Fimage.png?alt=media\&token=958518ec-5a57-4b9d-a263-3ab8b57e70e2)

![](https://4057777515-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MHH7KhyMHFxZjjhb__O%2F-MHLiKJYPdn57tulwbRk%2F-MHM-cBe97miyrKAOwmA%2Fimage.png?alt=media\&token=fb15b3a1-756c-40b5-9288-f88c283600fc)

###

### Potential Exploit

<https://www.rapid7.com/db/modules/exploit/multi/http/nibbleblog_file_upload>
