┌─[vpn.coursestack.com 10.200.80.22]─[jimmex@attacker]─[~/hacksmarter/slayer]
└──╼ [★]$ nmap -sC -sV -vv -oA init 10.1.124.85 -Pn
Host discovery disabled (-Pn). All addresses will be marked 'up' and scan times may be slower.
Starting Nmap 7.94SVN ( https://nmap.org ) at 2026-08-09 18:47 PDT
NSE: Loaded 156 scripts for scanning.
NSE: Script Pre-scanning.
NSE: Starting runlevel 1 (of 3) scan.
Initiating NSE at 18:47
Completed NSE at 18:47, 0.00s elapsed
NSE: Starting runlevel 2 (of 3) scan.
Initiating NSE at 18:47
Completed NSE at 18:47, 0.00s elapsed
NSE: Starting runlevel 3 (of 3) scan.
Initiating NSE at 18:47
Completed NSE at 18:47, 0.00s elapsed
Initiating Parallel DNS resolution of 1 host. at 18:47
Completed Parallel DNS resolution of 1 host. at 18:47, 0.10s elapsed
Initiating Connect Scan at 18:47
Scanning 10.1.124.85 [1000 ports]
Discovered open port 445/tcp on 10.1.124.85
Discovered open port 135/tcp on 10.1.124.85
Discovered open port 3389/tcp on 10.1.124.85
Completed Connect Scan at 18:48, 12.33s elapsed (1000 total ports)
Initiating Service scan at 18:48
Scanning 3 services on 10.1.124.85
Completed Service scan at 18:49, 94.87s elapsed (3 services on 1 host)
NSE: Script scanning 10.1.124.85.
NSE: Starting runlevel 1 (of 3) scan.
Initiating NSE at 18:49
NSE Timing: About 99.76% done; ETC: 18:50 (0:00:00 remaining)
Completed NSE at 18:50, 40.12s elapsed
NSE: Starting runlevel 2 (of 3) scan.
Initiating NSE at 18:50
Completed NSE at 18:50, 2.08s elapsed
NSE: Starting runlevel 3 (of 3) scan.
Initiating NSE at 18:50
Completed NSE at 18:50, 0.00s elapsed
Nmap scan report for 10.1.124.85
Host is up, received user-set (0.16s latency).
Scanned at 2026-08-09 18:47:57 PDT for 150s
Not shown: 997 filtered tcp ports (no-response)
PORT STATE SERVICE REASON VERSION
135/tcp  open  msrpc              syn-ack Microsoft Windows RPC
445/tcp  open  microsoft-ds?      syn-ack
3389/tcp open  ssl/ms-wbt-server? syn-ack
| rdp-ntlm-info:
| Target_Name: EC2AMAZ-M1LFCNO
| NetBIOS_Domain_Name: EC2AMAZ-M1LFCNO
| NetBIOS_Computer_Name: EC2AMAZ-M1LFCNO
| DNS_Domain_Name: EC2AMAZ-M1LFCNO
| DNS_Computer_Name: EC2AMAZ-M1LFCNO
| Product_Version: 10.0.26100
| _ System_Time: 2026-08-10T01:49:47+00:00
| _ssl-date: TLS randomness does not represent time
| ssl-cert: Subject: commonName=EC2AMAZ-M1LFCNO
| Issuer: commonName=EC2AMAZ-M1LFCNO
| Public Key type: rsa
| Public Key bits: 2048
| Signature Algorithm: sha256WithRSAEncryption
| Not valid before: 2026-08-09T01:44:49
| Not valid after: 2027-02-08T01:44:49
| MD5: 0596:97ef:78d2:9e20:d053:fe19:b9c5:36c2
| SHA-1: 6def:df82:a3db:bce9:b18e:5e28:2986:251b:0ae5:0c42
< SNIP>
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Host script results:
| p2p-conficker:
| Checking for Conficker.C or higher...
| Check 1 (port 60118/tcp): CLEAN (Timeout)
| Check 2 (port 30828/tcp): CLEAN (Timeout)
| Check 3 (port 20560/udp): CLEAN (Timeout)
| Check 4 (port 59511/udp): CLEAN (Timeout)
| _ 0/4 checks are positive: Host is CLEAN or ports are blocked
| _clock-skew: mean: 1s, deviation: 0s, median: 1s
| smb2-security-mode:
| 3:1:1:
| _ Message signing enabled but not required
| smb2-time:
| date: 2026-08-10T01:49:50
| _ start_date: N/A

NSE: Script Post-scanning.
NSE: Starting runlevel 1 (of 3) scan.
Initiating NSE at 18:50
Completed NSE at 18:50, 0.00s elapsed
NSE: Starting runlevel 2 (of 3) scan.
Initiating NSE at 18:50
Completed NSE at 18:50, 0.00s elapsed
NSE: Starting runlevel 3 (of 3) scan.
Initiating NSE at 18:50
Completed NSE at 18:50, 0.00s elapsed
Read data files from: /usr/bin/../share/nmap
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 154.58 seconds