Starting Nmap 7.94SVN ( https://nmap.org ) at 2024-12-20 07:31 EST Nmap scan report for 192.168.56.10 Host is up (0.00021s latency). Not shown: 987 closed tcp ports (reset) PORT STATE SERVICE VERSION 53/tcp open domain? 80/tcp open http Microsoft IIS httpd 10.0 |_http-title: IIS Windows Server |_http-server-header: Microsoft-IIS/10.0 | http-methods: |_ Potentially risky methods: TRACE 88/tcp open kerberos-sec Microsoft Windows Kerberos (server time: 2024-12-20 12:30:39Z) 135/tcp open msrpc Microsoft Windows RPC 139/tcp open netbios-ssn Microsoft Windows netbios-ssn 389/tcp open ldap Microsoft Windows Active Directory LDAP (Domain: sevenkingdoms.local0., Site: Default-First-Site-Name) |_ssl-date: 2024-12-20T12:33:24+00:00; -37s from scanner time. | ssl-cert: Subject: commonName=kingslanding.sevenkingdoms.local | Subject Alternative Name: othername: 1.3.6.1.4.1.311.25.1::, DNS:kingslanding.sevenkingdoms.local | Not valid before: 2024-12-19T16:49:10 |_Not valid after: 2025-12-19T16:49:10 445/tcp open microsoft-ds? 464/tcp open kpasswd5? 593/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0 636/tcp open ssl/ldap Microsoft Windows Active Directory LDAP (Domain: sevenkingdoms.local0., Site: Default-First-Site-Name) | ssl-cert: Subject: commonName=kingslanding.sevenkingdoms.local | Subject Alternative Name: othername: 1.3.6.1.4.1.311.25.1::, DNS:kingslanding.sevenkingdoms.local | Not valid before: 2024-12-19T16:49:10 |_Not valid after: 2025-12-19T16:49:10 |_ssl-date: 2024-12-20T12:33:24+00:00; -38s from scanner time. 3268/tcp open ldap Microsoft Windows Active Directory LDAP (Domain: sevenkingdoms.local0., Site: Default-First-Site-Name) | ssl-cert: Subject: commonName=kingslanding.sevenkingdoms.local | Subject Alternative Name: othername: 1.3.6.1.4.1.311.25.1::, DNS:kingslanding.sevenkingdoms.local | Not valid before: 2024-12-19T16:49:10 |_Not valid after: 2025-12-19T16:49:10 |_ssl-date: 2024-12-20T12:33:25+00:00; -37s from scanner time. 3269/tcp open ssl/ldap Microsoft Windows Active Directory LDAP (Domain: sevenkingdoms.local0., Site: Default-First-Site-Name) | ssl-cert: Subject: commonName=kingslanding.sevenkingdoms.local | Subject Alternative Name: othername: 1.3.6.1.4.1.311.25.1::, DNS:kingslanding.sevenkingdoms.local | Not valid before: 2024-12-19T16:49:10 |_Not valid after: 2025-12-19T16:49:10 |_ssl-date: 2024-12-20T12:33:24+00:00; -38s from scanner time. 3389/tcp open ms-wbt-server Microsoft Terminal Services |_ssl-date: 2024-12-20T12:33:24+00:00; -38s from scanner time. | ssl-cert: Subject: commonName=kingslanding.sevenkingdoms.local | Not valid before: 2024-12-18T16:25:50 |_Not valid after: 2025-06-19T16:25:50 | rdp-ntlm-info: | Target_Name: SEVENKINGDOMS | NetBIOS_Domain_Name: SEVENKINGDOMS | NetBIOS_Computer_Name: KINGSLANDING | DNS_Domain_Name: sevenkingdoms.local | DNS_Computer_Name: kingslanding.sevenkingdoms.local | DNS_Tree_Name: sevenkingdoms.local | Product_Version: 10.0.17763 |_ System_Time: 2024-12-20T12:33:07+00:00 MAC Address: 08:00:27:63:7C:0F (Oracle VirtualBox virtual NIC) No exact OS matches for host (If you know what OS is running on it, see https://nmap.org/submit/ ). TCP/IP fingerprint: OS:SCAN(V=7.94SVN%E=4%D=12/20%OT=53%CT=1%CU=30300%PV=Y%DS=1%DC=D%G=Y%M=0800 OS:27%TM=6765643A%P=x86_64-pc-linux-gnu)SEQ(SP=102%GCD=1%ISR=104%TI=I%CI=I% OS:II=I%SS=S%TS=U)OPS(O1=M5B4NW8NNS%O2=M5B4NW8NNS%O3=M5B4NW8%O4=M5B4NW8NNS% OS:O5=M5B4NW8NNS%O6=M5B4NNS)WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6= OS:FF70)ECN(R=Y%DF=Y%T=80%W=FFFF%O=M5B4NW8NNS%CC=Y%Q=)T1(R=Y%DF=Y%T=80%S=O% OS:A=S+%F=AS%RD=0%Q=)T2(R=Y%DF=Y%T=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)T3(R=Y%DF OS:=Y%T=80%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)T4(R=Y%DF=Y%T=80%W=0%S=A%A=O%F=R%O=% OS:RD=0%Q=)T5(R=Y%DF=Y%T=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)T6(R=Y%DF=Y%T=80%W OS:=0%S=A%A=O%F=R%O=%RD=0%Q=)T7(R=Y%DF=Y%T=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=) OS:U1(R=Y%DF=N%T=80%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)IE(R=Y%D OS:FI=N%T=80%CD=Z) Network Distance: 1 hop Service Info: Host: KINGSLANDING; OS: Windows; CPE: cpe:/o:microsoft:windows Host script results: |_clock-skew: mean: -37s, deviation: 0s, median: -38s | smb2-time: | date: 2024-12-20T12:33:08 |_ start_date: N/A | smb2-security-mode: | 3:1:1: |_ Message signing enabled and required |_nbstat: NetBIOS name: KINGSLANDING, NetBIOS user: , NetBIOS MAC: 08:00:27:63:7c:0f (Oracle VirtualBox virtual NIC) TRACEROUTE HOP RTT ADDRESS 1 0.21 ms 192.168.56.10 Nmap scan report for 192.168.56.11 Host is up (0.00020s latency). Not shown: 988 closed tcp ports (reset) PORT STATE SERVICE VERSION 53/tcp open domain? 88/tcp open kerberos-sec Microsoft Windows Kerberos (server time: 2024-12-20 12:30:42Z) 135/tcp open msrpc Microsoft Windows RPC 139/tcp open netbios-ssn Microsoft Windows netbios-ssn 389/tcp open ldap Microsoft Windows Active Directory LDAP (Domain: sevenkingdoms.local0., Site: Default-First-Site-Name) | ssl-cert: Subject: commonName=winterfell.north.sevenkingdoms.local | Subject Alternative Name: othername: 1.3.6.1.4.1.311.25.1::, DNS:winterfell.north.sevenkingdoms.local | Not valid before: 2024-12-19T17:16:59 |_Not valid after: 2025-12-19T17:16:59 |_ssl-date: 2024-12-20T12:33:23+00:00; -39s from scanner time. 445/tcp open microsoft-ds? 464/tcp open kpasswd5? 593/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0 636/tcp open ssl/ldap Microsoft Windows Active Directory LDAP (Domain: sevenkingdoms.local0., Site: Default-First-Site-Name) |_ssl-date: 2024-12-20T12:33:23+00:00; -38s from scanner time. | ssl-cert: Subject: commonName=winterfell.north.sevenkingdoms.local | Subject Alternative Name: othername: 1.3.6.1.4.1.311.25.1::, DNS:winterfell.north.sevenkingdoms.local | Not valid before: 2024-12-19T17:16:59 |_Not valid after: 2025-12-19T17:16:59 3268/tcp open ldap Microsoft Windows Active Directory LDAP (Domain: sevenkingdoms.local0., Site: Default-First-Site-Name) |_ssl-date: 2024-12-20T12:33:24+00:00; -38s from scanner time. | ssl-cert: Subject: commonName=winterfell.north.sevenkingdoms.local | Subject Alternative Name: othername: 1.3.6.1.4.1.311.25.1::, DNS:winterfell.north.sevenkingdoms.local | Not valid before: 2024-12-19T17:16:59 |_Not valid after: 2025-12-19T17:16:59 3269/tcp open ssl/ldap Microsoft Windows Active Directory LDAP (Domain: sevenkingdoms.local0., Site: Default-First-Site-Name) | ssl-cert: Subject: commonName=winterfell.north.sevenkingdoms.local | Subject Alternative Name: othername: 1.3.6.1.4.1.311.25.1::, DNS:winterfell.north.sevenkingdoms.local | Not valid before: 2024-12-19T17:16:59 |_Not valid after: 2025-12-19T17:16:59 |_ssl-date: 2024-12-20T12:33:24+00:00; -38s from scanner time. 3389/tcp open ms-wbt-server Microsoft Terminal Services | ssl-cert: Subject: commonName=winterfell.north.sevenkingdoms.local | Not valid before: 2024-12-18T16:34:49 |_Not valid after: 2025-06-19T16:34:49 |_ssl-date: 2024-12-20T12:33:23+00:00; -38s from scanner time. | rdp-ntlm-info: | Target_Name: NORTH | NetBIOS_Domain_Name: NORTH | NetBIOS_Computer_Name: WINTERFELL | DNS_Domain_Name: north.sevenkingdoms.local | DNS_Computer_Name: winterfell.north.sevenkingdoms.local | DNS_Tree_Name: sevenkingdoms.local | Product_Version: 10.0.17763 |_ System_Time: 2024-12-20T12:33:13+00:00 MAC Address: 08:00:27:9F:FA:F7 (Oracle VirtualBox virtual NIC) Device type: general purpose Running: Microsoft Windows 2019 OS details: Microsoft Windows Server 2019 Network Distance: 1 hop Service Info: Host: WINTERFELL; OS: Windows; CPE: cpe:/o:microsoft:windows Host script results: | smb2-time: | date: 2024-12-20T12:33:13 |_ start_date: N/A |_nbstat: NetBIOS name: WINTERFELL, NetBIOS user: , NetBIOS MAC: 08:00:27:9f:fa:f7 (Oracle VirtualBox virtual NIC) |_clock-skew: mean: -36s, deviation: 2s, median: -38s | smb2-security-mode: | 3:1:1: |_ Message signing enabled and required TRACEROUTE HOP RTT ADDRESS 1 0.20 ms 192.168.56.11 Nmap scan report for 192.168.56.12 Host is up (0.00017s latency). Not shown: 988 closed tcp ports (reset) PORT STATE SERVICE VERSION 53/tcp open domain? 88/tcp open kerberos-sec Microsoft Windows Kerberos (server time: 2024-12-20 12:30:45Z) 135/tcp open msrpc Microsoft Windows RPC 139/tcp open netbios-ssn Microsoft Windows netbios-ssn 389/tcp open ldap Microsoft Windows Active Directory LDAP (Domain: essos.local, Site: Default-First-Site-Name) |_ssl-date: 2024-12-20T12:33:23+00:00; -38s from scanner time. | ssl-cert: Subject: commonName=meereen.essos.local | Subject Alternative Name: othername: 1.3.6.1.4.1.311.25.1::, DNS:meereen.essos.local | Not valid before: 2024-12-19T16:49:23 |_Not valid after: 2025-12-19T16:49:23 445/tcp open microsoft-ds Windows Server 2016 Standard Evaluation 14393 microsoft-ds (workgroup: ESSOS) 464/tcp open kpasswd5? 593/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0 636/tcp open ssl/ldap Microsoft Windows Active Directory LDAP (Domain: essos.local, Site: Default-First-Site-Name) |_ssl-date: 2024-12-20T12:33:23+00:00; -39s from scanner time. | ssl-cert: Subject: commonName=meereen.essos.local | Subject Alternative Name: othername: 1.3.6.1.4.1.311.25.1::, DNS:meereen.essos.local | Not valid before: 2024-12-19T16:49:23 |_Not valid after: 2025-12-19T16:49:23 3268/tcp open ldap Microsoft Windows Active Directory LDAP (Domain: essos.local, Site: Default-First-Site-Name) |_ssl-date: 2024-12-20T12:33:23+00:00; -39s from scanner time. | ssl-cert: Subject: commonName=meereen.essos.local | Subject Alternative Name: othername: 1.3.6.1.4.1.311.25.1::, DNS:meereen.essos.local | Not valid before: 2024-12-19T16:49:23 |_Not valid after: 2025-12-19T16:49:23 3269/tcp open ssl/ldap Microsoft Windows Active Directory LDAP (Domain: essos.local, Site: Default-First-Site-Name) |_ssl-date: 2024-12-20T12:33:23+00:00; -39s from scanner time. | ssl-cert: Subject: commonName=meereen.essos.local | Subject Alternative Name: othername: 1.3.6.1.4.1.311.25.1::, DNS:meereen.essos.local | Not valid before: 2024-12-19T16:49:23 |_Not valid after: 2025-12-19T16:49:23 3389/tcp open ms-wbt-server Microsoft Terminal Services | rdp-ntlm-info: | Target_Name: ESSOS | NetBIOS_Domain_Name: ESSOS | NetBIOS_Computer_Name: MEEREEN | DNS_Domain_Name: essos.local | DNS_Computer_Name: meereen.essos.local | DNS_Tree_Name: essos.local | Product_Version: 10.0.14393 |_ System_Time: 2024-12-20T12:33:08+00:00 | ssl-cert: Subject: commonName=meereen.essos.local | Not valid before: 2024-12-18T16:25:49 |_Not valid after: 2025-06-19T16:25:49 |_ssl-date: 2024-12-20T12:33:23+00:00; -39s from scanner time. MAC Address: 08:00:27:43:C3:1D (Oracle VirtualBox virtual NIC) Device type: general purpose Running: Microsoft Windows 2016 OS CPE: cpe:/o:microsoft:windows_server_2016 OS details: Microsoft Windows Server 2016 build 10586 - 14393 Network Distance: 1 hop Service Info: Host: MEEREEN; OS: Windows; CPE: cpe:/o:microsoft:windows Host script results: | smb-os-discovery: | OS: Windows Server 2016 Standard Evaluation 14393 (Windows Server 2016 Standard Evaluation 6.3) | Computer name: meereen | NetBIOS computer name: MEEREEN\x00 | Domain name: essos.local | Forest name: essos.local | FQDN: meereen.essos.local |_ System time: 2024-12-20T04:33:08-08:00 | smb-security-mode: | account_used: guest | authentication_level: user | challenge_response: supported |_ message_signing: required | smb2-time: | date: 2024-12-20T12:33:08 |_ start_date: 2024-12-20T11:49:01 | smb2-security-mode: | 3:1:1: |_ Message signing enabled and required |_nbstat: NetBIOS name: MEEREEN, NetBIOS user: , NetBIOS MAC: 08:00:27:43:c3:1d (Oracle VirtualBox virtual NIC) |_clock-skew: mean: 52m41s, deviation: 2h40m00s, median: -38s TRACEROUTE HOP RTT ADDRESS 1 0.17 ms 192.168.56.12 Nmap scan report for 192.168.56.22 Host is up (0.00017s latency). Not shown: 994 closed tcp ports (reset) PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS httpd 10.0 |_http-server-header: Microsoft-IIS/10.0 | http-methods: |_ Potentially risky methods: TRACE |_http-title: Site doesn't have a title (text/html). 135/tcp open msrpc Microsoft Windows RPC 139/tcp open netbios-ssn Microsoft Windows netbios-ssn 445/tcp open microsoft-ds? 1433/tcp open ms-sql-s Microsoft SQL Server 2019 15.00.2000.00; RTM |_ssl-date: 2024-12-20T12:33:23+00:00; -38s from scanner time. | ms-sql-ntlm-info: | 192.168.56.22:1433: | Target_Name: NORTH | NetBIOS_Domain_Name: NORTH | NetBIOS_Computer_Name: CASTELBLACK | DNS_Domain_Name: north.sevenkingdoms.local | DNS_Computer_Name: castelblack.north.sevenkingdoms.local | DNS_Tree_Name: sevenkingdoms.local |_ Product_Version: 10.0.17763 | ssl-cert: Subject: commonName=SSL_Self_Signed_Fallback | Not valid before: 2024-12-20T11:49:48 |_Not valid after: 2054-12-20T11:49:48 | ms-sql-info: | 192.168.56.22:1433: | Version: | name: Microsoft SQL Server 2019 RTM | number: 15.00.2000.00 | Product: Microsoft SQL Server 2019 | Service pack level: RTM | Post-SP patches applied: false |_ TCP port: 1433 3389/tcp open ms-wbt-server Microsoft Terminal Services |_ssl-date: 2024-12-20T12:33:23+00:00; -38s from scanner time. | ssl-cert: Subject: commonName=castelblack.north.sevenkingdoms.local | Not valid before: 2024-12-18T16:47:57 |_Not valid after: 2025-06-19T16:47:57 | rdp-ntlm-info: | Target_Name: NORTH | NetBIOS_Domain_Name: NORTH | NetBIOS_Computer_Name: CASTELBLACK | DNS_Domain_Name: north.sevenkingdoms.local | DNS_Computer_Name: castelblack.north.sevenkingdoms.local | DNS_Tree_Name: sevenkingdoms.local | Product_Version: 10.0.17763 |_ System_Time: 2024-12-20T12:33:08+00:00 MAC Address: 08:00:27:CA:75:9E (Oracle VirtualBox virtual NIC) Device type: general purpose Running: Microsoft Windows 2019 OS details: Microsoft Windows Server 2019 Network Distance: 1 hop Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows Host script results: |_clock-skew: mean: -37s, deviation: 0s, median: -37s | smb2-security-mode: | 3:1:1: |_ Message signing enabled but not required |_nbstat: NetBIOS name: CASTELBLACK, NetBIOS user: , NetBIOS MAC: 08:00:27:ca:75:9e (Oracle VirtualBox virtual NIC) | smb2-time: | date: 2024-12-20T12:33:09 |_ start_date: N/A TRACEROUTE HOP RTT ADDRESS 1 0.17 ms 192.168.56.22 Nmap scan report for 192.168.56.23 Host is up (0.00014s latency). Not shown: 994 closed tcp ports (reset) PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS httpd 10.0 | http-methods: |_ Potentially risky methods: TRACE |_http-server-header: Microsoft-IIS/10.0 |_http-title: IIS Windows Server 135/tcp open msrpc Microsoft Windows RPC 139/tcp open netbios-ssn Microsoft Windows netbios-ssn 445/tcp open microsoft-ds Windows Server 2016 Standard Evaluation 14393 microsoft-ds 1433/tcp open ms-sql-s Microsoft SQL Server 2019 15.00.2000.00; RTM | ms-sql-info: | 192.168.56.23:1433: | Version: | name: Microsoft SQL Server 2019 RTM | number: 15.00.2000.00 | Product: Microsoft SQL Server 2019 | Service pack level: RTM | Post-SP patches applied: false |_ TCP port: 1433 |_ssl-date: 2024-12-20T12:33:40+00:00; -22s from scanner time. | ms-sql-ntlm-info: | 192.168.56.23:1433: | Target_Name: ESSOS | NetBIOS_Domain_Name: ESSOS | NetBIOS_Computer_Name: BRAAVOS | DNS_Domain_Name: essos.local | DNS_Computer_Name: braavos.essos.local | DNS_Tree_Name: essos.local |_ Product_Version: 10.0.14393 | ssl-cert: Subject: commonName=SSL_Self_Signed_Fallback | Not valid before: 2024-12-20T11:55:19 |_Not valid after: 2054-12-20T11:55:19 3389/tcp open ms-wbt-server Microsoft Terminal Services |_ssl-date: 2024-12-20T12:33:40+00:00; -22s from scanner time. | ssl-cert: Subject: commonName=braavos.essos.local | Not valid before: 2024-12-18T16:47:56 |_Not valid after: 2025-06-19T16:47:56 | rdp-ntlm-info: | Target_Name: ESSOS | NetBIOS_Domain_Name: ESSOS | NetBIOS_Computer_Name: BRAAVOS | DNS_Domain_Name: essos.local | DNS_Computer_Name: braavos.essos.local | DNS_Tree_Name: essos.local | Product_Version: 10.0.14393 |_ System_Time: 2024-12-20T12:33:24+00:00 MAC Address: 08:00:27:15:48:DF (Oracle VirtualBox virtual NIC) Device type: general purpose Running: Microsoft Windows 2016 OS CPE: cpe:/o:microsoft:windows_server_2016 OS details: Microsoft Windows Server 2016 build 10586 - 14393 Network Distance: 1 hop Service Info: OSs: Windows, Windows Server 2008 R2 - 2012; CPE: cpe:/o:microsoft:windows Host script results: |_nbstat: NetBIOS name: BRAAVOS, NetBIOS user: , NetBIOS MAC: 08:00:27:15:48:df (Oracle VirtualBox virtual NIC) | smb-security-mode: | account_used: guest | authentication_level: user | challenge_response: supported |_ message_signing: disabled (dangerous, but default) | smb-os-discovery: | OS: Windows Server 2016 Standard Evaluation 14393 (Windows Server 2016 Standard Evaluation 6.3) | Computer name: braavos | NetBIOS computer name: BRAAVOS\x00 | Domain name: essos.local | Forest name: essos.local | FQDN: braavos.essos.local |_ System time: 2024-12-20T04:33:25-08:00 | smb2-time: | date: 2024-12-20T12:33:25 |_ start_date: 2024-12-20T11:55:12 | smb2-security-mode: | 3:1:1: |_ Message signing enabled but not required |_clock-skew: mean: 1h08m12s, deviation: 3h01m26s, median: -22s TRACEROUTE HOP RTT ADDRESS 1 0.14 ms 192.168.56.23 OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 5 IP addresses (5 hosts up) scanned in 177.79 seconds