(Use mode '-w' if you want to scan it anyway) - Entering directory: - (!) WARNING: Directory IS LISTABLE.

Nmap done: 1 IP address (1 host up) scanned in 21.57 seconds dirb - DIRB v2.22 By The Dark Raver - START_TIME: Mon May 6 05:31:28 2019 URL_BASE: WORDLIST_FILES: /usr/share/dirb/wordlists/common.txt - GENERATED WORDS: 4612 - Scanning URL: - + (CODE:403|SIZE:328) => DIRECTORY: + (CODE:200|SIZE:1255) + (CODE:200|SIZE:1255) => DIRECTORY: + (CODE:302|SIZE:0) + (CODE:302|SIZE:220) + (CODE:403|SIZE:333) - Entering directory: - (!) WARNING: Directory IS LISTABLE. 139/tcp open netbios-ssn Samba smbd 3.X - 4.X (workgroup: WORKGROUP) 445/tcp open netbios-ssn Samba smbd 3.0.28a (workgroup: WORKGROUP) MAC Address: 00:0C:29:BF:E3:E7 (VMware) Device type: general purpose Running: Linux 2.6.X OS CPE: cpe:/o:linux:linux_kernel:2.6 OS details: Linux 2.6.9 - 2.6.33 Network Distance: 1 hop Service Info: OS: Linux CPE: cpe:/o:linux:linux_kernel Host script results: |_clock-skew: mean: 10h00m01s, deviation: 2h49m42s, median: 8h00m01s |_nbstat: NetBIOS name: KIOPTRIX4, NetBIOS user:, NetBIOS MAC: (unknown) | smb-os-discovery: | OS: Unix (Samba 3.0.28a) | Computer name: Kioptrix4 | NetBIOS computer name: | Domain name: localdomain | FQDN: Kioptrix4.localdomain |_ System time: T13:30:59-04:00 | smb-security-mode: | account_used: guest | authentication_level: user | challenge_response: supported |_ message_signing: disabled (dangerous, but default) |_smb2-time: Protocol negotiation failed (SMB2) TRACEROUTE HOP RTT ADDRESS 1 0.53 ms 192.168.50.91 OS and Service detection performed. Not shown: 566 closed ports, 430 filtered ports PORT STATE SERVICE VERSION 22/tcp open ssh OpenSSH 4.7p1 Debian 8ubuntu1.2 (protocol 2.0) | ssh-hostkey: |_ 2048 85:40:c6:d5:41:26:05:34:ad:f8:6e:f2:a7:6b:4f:0e (RSA) 80/tcp open http Apache httpd 2.2.8 ((Ubuntu) PHP/5.2.4-2ubuntu5.6 with Suhosin-Patch) |_http-server-header: Apache/2.2.8 (Ubuntu) PHP/5.2.4-2ubuntu5.6 with Suhosin-Patch |_http-title: Site doesn't have a title (text/html). Total size: 300 _ IP At MAC Address Count Len MAC Vendor / Hostname red ARP Req/Rep packets, from - 192.168.50.91 00:0c:29:bf:e3:e7 1 60 VMware, Inc. netdiscover Currently scanning: 192.168.68.0/16 | Screen View: Unique Hosts 5 Captured ARP Req/Rep packets, from 3 hosts. Started off with some standard enumeration of IP and services, and of webpages.

Smbd mac