Enumeration

as usual start with nmap scanning

bash 
jimmex@attacker ➜ nmap -sC -sV -vv -oA results 10.129.17.81
# Nmap 7.95 scan initiated Sun Mar 29 15:21:16 2026 as: /usr/lib/nmap/nmap --privileged -sC -sV -vv -oA results -p80,22 10.129.17.81
Nmap scan report for wingdata.htb (10.129.17.81)
Host is up, received echo-reply ttl 63 (0.082s latency).
Scanned at 2026-03-29 15:21:17 EET for 13s

PORT STATE SERVICE REASON VERSION
22/tcp open  ssh     syn-ack ttl 63 OpenSSH 9.2p1 Debian 2+deb12u7 (protocol 2.0)
| ssh-hostkey:
| 256 
...