Malleum Knowledge Base

Recon

2 min read

Nmap

PORT     STATE SERVICE       VERSION
135/tcp  open  msrpc         Microsoft Windows RPC
445/tcp  open  microsoft-ds?
1433/tcp open  ms-sql-s      Microsoft SQL Server 2016 13.00.4001.00; SP1
| ms-sql-info: 
|   10.9.20.11\SQLEXPRESS: 
|     Instance name: SQLEXPRESS
|     Version: 
|       name: Microsoft SQL Server 2016 SP1
|       number: 13.00.4001.00
|       Product: Microsoft SQL Server 2016
|       Service pack level: SP1
|       Post-SP patches applied: false
|     TCP port: 1433
|_    Clustered: false
| ms-sql-ntlm-info: 
|   10.9.20.11\SQLEXPRESS: 
|     Target_Name: M3C
|     NetBIOS_Domain_Name: M3C
|     NetBIOS_Computer_Name: M3SQLW
|     DNS_Domain_Name: m3c.local
|     DNS_Computer_Name: m3sqlw.m3c.local
|     DNS_Tree_Name: m3c.local
|_    Product_Version: 10.0.14393
| ssl-cert: Subject: commonName=SSL_Self_Signed_Fallback
| Not valid before: 2024-02-07T05:00:02
|_Not valid after:  2054-02-07T05:00:02
|_ssl-date: 2024-02-07T05:11:48+00:00; +12s from scanner time.
3389/tcp open  ms-wbt-server Microsoft Terminal Services
|_ssl-date: 2024-02-07T05:11:48+00:00; +12s from scanner time.
| ssl-cert: Subject: commonName=m3sqlw.m3c.local
| Not valid before: 2024-01-02T11:18:15
|_Not valid after:  2024-07-03T11:18:15
| rdp-ntlm-info: 
|   Target_Name: M3C
|   NetBIOS_Domain_Name: M3C
|   NetBIOS_Computer_Name: M3SQLW
|   DNS_Domain_Name: m3c.local
|   DNS_Computer_Name: m3sqlw.m3c.local
|   DNS_Tree_Name: m3c.local
|   Product_Version: 10.0.14393
|_  System_Time: 2024-02-07T05:11:08+00:00
 
 
 
5985/tcp  open  http          Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
|_http-title: Not Found
|_http-server-header: Microsoft-HTTPAPI/2.0
47001/tcp open  http          Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
|_http-server-header: Microsoft-HTTPAPI/2.0
|_http-title: Not Found
49664/tcp open  msrpc         Microsoft Windows RPC
49665/tcp open  msrpc         Microsoft Windows RPC
49666/tcp open  msrpc         Microsoft Windows RPC
49667/tcp open  msrpc         Microsoft Windows RPC
49668/tcp open  msrpc         Microsoft Windows RPC
49669/tcp open  msrpc         Microsoft Windows RPC
49705/tcp open  msrpc         Microsoft Windows RPC
49794/tcp open  ms-sql-s      Microsoft SQL Server 2016 13.00.4001.00; SP1
|_ssl-date: 2024-02-07T05:42:38+00:00; +12s from scanner time.
| ssl-cert: Subject: commonName=SSL_Self_Signed_Fallback
| Not valid before: 2024-02-07T05:30:02
|_Not valid after:  2054-02-07T05:30:02
| ms-sql-ntlm-info: 
|   10.9.20.11:49794: 
|     Target_Name: M3C
|     NetBIOS_Domain_Name: M3C
|     NetBIOS_Computer_Name: M3SQLW
|     DNS_Domain_Name: m3c.local
|     DNS_Computer_Name: m3sqlw.m3c.local
|     DNS_Tree_Name: m3c.local
|_    Product_Version: 10.0.14393
| ms-sql-info: 
|   10.9.20.11:49794: 
|     Version: 
|       name: Microsoft SQL Server 2016 SP1
|       number: 13.00.4001.00
|       Product: Microsoft SQL Server 2016
|       Service pack level: SP1
|       Post-SP patches applied: false
|_    TCP port: 49794

Graph View