# Scanning and Enumeration

## Scanning

```
kali@kali:~/HTB/solidstate$ nmap -sV -sC -p 22,25,80,110,119,4555 10.10.10.51 -oN solidstate
Starting Nmap 7.80 ( https://nmap.org ) at 2020-10-12 09:40 EDT
Nmap scan report for 10.10.10.51
Host is up (0.076s latency).

PORT     STATE SERVICE     VERSION
22/tcp   open  ssh         OpenSSH 7.4p1 Debian 10+deb9u1 (protocol 2.0)
| ssh-hostkey: 
|   2048 77:00:84:f5:78:b9:c7:d3:54:cf:71:2e:0d:52:6d:8b (RSA)
|   256 78:b8:3a:f6:60:19:06:91:f5:53:92:1d:3f:48:ed:53 (ECDSA)
|_  256 e4:45:e9:ed:07:4d:73:69:43:5a:12:70:9d:c4:af:76 (ED25519)
25/tcp   open  smtp        JAMES smtpd 2.3.2
|_smtp-commands: solidstate Hello nmap.scanme.org (10.10.14.34 [10.10.14.34]), 
80/tcp   open  http        Apache httpd 2.4.25 ((Debian))
|_http-server-header: Apache/2.4.25 (Debian)
|_http-title: Home - Solid State Security
110/tcp  open  pop3        JAMES pop3d 2.3.2
119/tcp  open  nntp        JAMES nntpd (posting ok)
4555/tcp open  james-admin JAMES Remote Admin 2.3.2
Service Info: Host: solidstate; OS: Linux; CPE: cpe:/o:linux:linux_kernel

Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 24.63 seconds
```

## Enumeration&#x20;

### Port 80

### Port 25

{% embed url="<https://www.exploit-db.com/exploits/35513>" %}

### Port 110

* Runs James&#x20;

### Port 119

### Port 4555

* Default Credentials&#x20;
  * root/root
*

![](https://4057777515-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MHH7KhyMHFxZjjhb__O%2F-MJUSMUMyYv-7oXRdp-G%2F-MJUWONwq4Bkenyh_-oC%2Fimage.png?alt=media\&token=be90ad80-7527-4d08-93e3-f8c37a0decc9)
