TryHackMe — Nmap Practical Walkthrough

Target: 10.48.130.23

Hint: Pay close attention to the highest port, will reveal something to access the lower port (given by the challenge).

1. Scanning

nmap -sN 10.48.130.23
nmap -sS 10.48.130.23
nmap -sV -p- 10.48.130.23

• -sN: Null scan
• -sS: TCP SYN scan
• -sV: Service/version detection
• -p-: Scan all TCP ports

2. Credential Discovery

Port 31337 revealed SSH credentials:

ubuntu:Dafdas!!/str0ng

3. SSH Login

ssh ubuntu@10.48.130.23

Enter the discovered password.

4. Flag Discovery

cd /home/ubuntu
ls -la

Result: Found flag.txt.

Get PhaSin’s stories in your inbox

Join Medium for free to get updates from this writer.

Remember me for faster sign in

Methodology: Scanning → Enumeration → Credential Discovery → SSH Access → Flag Discovery.