┌──(root㉿kali)-[/miaosec] └─# nmap -sn 192.168.2.0/24 Starting Nmap 7.94SVN ( https://nmap.org ) at 2026-01-12 10:47 CST Nmap scan report for 192.168.2.1 Host is up (0.00083s latency). MAC Address: 0A:00:27:00:00:07 (Unknown) Nmap scan report for 192.168.2.2 Host is up (0.00057s latency). MAC Address: 08:00:27:C0:99:AA (Oracle VirtualBox virtual NIC) Nmap scan report for hacker.maze-sec.hmv (192.168.2.40) Host is up (0.00092s latency). MAC Address: 08:00:27:D9:43:14 (Oracle VirtualBox virtual NIC) Nmap scan report for 192.168.2.4 Host is up. Nmap done: 256 IP addresses (4 hosts up) scanned in 2.19 seconds
靶机IP：192.168.2.40
2、端口扫描
1.全端口扫描
1 2 3 4 5 6 7 8 9 10 11 12
┌──(root㉿kali)-[/miaosec] └─# nmap --min-rate 10000 -p- 192.168.2.40 Starting Nmap 7.94SVN ( https://nmap.org ) at 2026-01-12 10:47 CST Nmap scan report for hacker.maze-sec.hmv (192.168.2.40) Host is up (0.00051s latency). Not shown: 65533 closed tcp ports (reset) PORT STATE SERVICE 22/tcp open ssh 80/tcp open http MAC Address: 08:00:27:D9:43:14 (Oracle VirtualBox virtual NIC)
Nmap done: 1 IP address (1 host up) scanned in 3.63 seconds
┌──(root㉿kali)-[/miaosec] └─# nmap --min-rate 10000 -sT -sV -sC -O -p22,80 192.168.2.40 Starting Nmap 7.94SVN ( https://nmap.org ) at 2026-01-12 10:47 CST Nmap scan report for hacker.maze-sec.hmv (192.168.2.40) Host is up (0.0014s latency).
PORT STATE SERVICE VERSION 22/tcp open ssh OpenSSH 8.4p1 Debian 5+deb11u3 (protocol 2.0) | ssh-hostkey: | 3072 f6:a3:b6:78:c4:62:af:44:bb:1a:a0:0c:08:6b:98:f7 (RSA) | 256 bb:e8:a2:31:d4:05:a9:c9:31:ff:62:f6:32:84:21:9d (ECDSA) |_ 256 3b:ae:34:64:4f:a5:75:b9:4a:b9:81:f9:89:76:99:eb (ED25519) 80/tcp open http Apache httpd 2.4.62 ((Debian)) |_http-title: Site doesn't have a title (text/html). |_http-server-header: Apache/2.4.62 (Debian) MAC Address: 08:00:27:D9:43:14 (Oracle VirtualBox virtual NIC) Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: general purpose Running: Linux 4.X|5.X OS CPE: cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:5 OS details: Linux 4.15 - 5.8 Network Distance: 1 hop Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 9.28 seconds
3.udp扫描
1 2 3 4 5 6 7 8 9 10 11 12 13
┌──(root㉿kali)-[/miaosec] └─# nmap -sU --top-ports 100 192.168.2.40 Starting Nmap 7.94SVN ( https://nmap.org ) at 2026-01-12 10:51 CST Stats: 0:00:32 elapsed; 0 hosts completed (1 up), 1 undergoing UDP Scan UDP Scan Timing: About 38.40% done; ETC: 10:52 (0:00:51 remaining) Nmap scan report for hacker.maze-sec.hmv (192.168.2.40) Host is up (0.0013s latency). Not shown: 99 closed udp ports (port-unreach) PORT STATE SERVICE 68/udp open|filtered dhcpc MAC Address: 08:00:27:D9:43:14 (Oracle VirtualBox virtual NIC)
Nmap done: 1 IP address (1 host up) scanned in 104.55 seconds
┌──(root㉿kali)-[/tmp/moodle] └─# dirsearch -u "http://moodle.dsz" /usr/lib/python3/dist-packages/dirsearch/dirsearch.py:23: DeprecationWarning: pkg_resources is deprecated as an API. See https://setuptools.pypa.io/en/latest/pkg_resources.html from pkg_resources import DistributionNotFound, VersionConflict
测试命令，成功获取到id 
