Enumeration nmap Discovered open port 80/tcp on 10.10.11.18 Discovered open port 22/tcp on 10.10.11.18 Nous avons decouvert deux port ouverts 80 et 22 enumeration web nous avons ajouté le site s ![[Pasted image 20251117111924.png]]
Posts
Enumeration Nmap PORT STATE SERVICE REASON VERSION 3389/tcp open ms-wbt-server syn-ack ttl 127 Microsoft Terminal Services |_ssl-date: 2025-12-28T22:45:46+00:00; 0s from scanner time. | ssl-cert: Subject: commonName=Escape | Issuer: commonName=Escape | Public Key type: rsa | Public Key bits: 2048 | Signature Algorithm: sha256WithRSAEncryption | Not valid before: 2025-12-27T22:39:20 | Not valid after: 2026-06-28T22:39:20 | MD5: beb0:afd1:f12f:b364:ef0f:9c2a:4328:eba5 | SHA-1: 2fae:461d:59b1:98bf:d626:d2f0:7ed1:2c2e:b026:9681 | -----BEGIN CERTIFICATE----- | MIIC0DCCAbigAwIBAgIQfxExIe2NtJVCmcjEtXQ5CDANBgkqhkiG9w0BAQsFADAR | MQ8wDQYDVQQDEwZFc2NhcGUwHhcNMjUxMjI3MjIzOTIwWhcNMjYwNjI4MjIzOTIw | WjARMQ8wDQYDVQQDEwZFc2NhcGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK | AoIBAQC4wyMYLvnw0O1MmQxcxuVohVhGAjVylcGJOnqbJabQXvrwZLSQvx//pz0Z | m9GEJmg82g9RFezAJqXr/qHg58Ml1oyuKfFIJd6NiCFiyc0UHOLj9c46Kv3iOC4I | p51omXdI4KjaamyG2af0jA1XbYd9XJ+A6yKC5DabhqY3moz47dJjBNwyw8yOYEG8 | Sde5XXEB4dVXGTEYwdttzJPWj26H9nYJGggory7n4Rmjp7N9sDSO4yjhQlAjG57z | 5fQD95wQRR2WmsYZV+7Pv+cSKILUR/JCD59M2DTKfM8jVx3461Q8qh523i/tMVkj | VX4ehJZGeGs8E0/GtRShCxhBvi3VAgMBAAGjJDAiMBMGA1UdJQQMMAoGCCsGAQUF | BwMBMAsGA1UdDwQEAwIEMDANBgkqhkiG9w0BAQsFAAOCAQEAnTDQ6a4WPzA7VlDG | nKl6z6LM6xnSVpFvLhuiJcJW1L/ZdllRNvQHGzIM/gNG+eAj6KYdMLboa1SFmMRL | CAavc1xUOg8PcDcm72rJeodO5HL3oyf3UJwoVsUFHS1+Bbm152L7J7iuWkWzoh4+ | kJGiOuIveu1Ram+MXTE06a5bddQ9NFDYKRJe2jD5e/4yN0x9rhcS8JnnHYvHII4A | Y7oU9vQ5u9TyGQoWbcGHBtYrFXjVdprFnU7YG4c5/xOitAXXizA9kR55ihgLmogj | sIV0l94GK3PvoXgk/R3nivDOjQ8vBlX1HtWb4wvymO0UN3PapMTiKA/6iXfTsvrI | uxGfNQ== |_-----END CERTIFICATE----- | rdp-ntlm-info: | Target_Name: ESCAPE | NetBIOS_Domain_Name: ESCAPE | NetBIOS_Computer_Name: ESCAPE | DNS_Domain_Name: Escape | DNS_Computer_Name: Escape | Product_Version: 10.0.19041 |_ System_Time: 2025-12-28T22:45:41+00:00 Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows Host script results: |_clock-skew: mean: 0s, deviation: 0s, median: 0s connection RDP ...
ar exemple, la valeur hexadécimale d’un exécutable est toujours « 4D 5A »
https://redops-academy.coursestack.com/dashboard