Hack The Box: MonitorsFour
Enum mairon $ rustscan -a 10.129.8.223 --ulimit 5000 -- -A -sCV -oN mo nitorsfour.txt .----. .-. .-. .----..---. .----. .---. .--. .-. .-. | {} }| { } |{ {__ {_ _}{ {__ / ___} / {} \ | `| | | .-. \| {_} |.-._} } | | .-._} }\ }/ /\ \| |\ | `-' `-'`-----'`----' `-' `----' `---' `-' `-'`-' `-' The Modern Day Port Scanner. ________________________________________ : http://discord.skerritt.blog : : https://github.com/RustScan/RustScan : -------------------------------------- RustScan: Where scanning meets swagging. 😎 [~] The config file is expected to be at "/home/gkroon/.rustscan.toml" [~] Automatically increasing ulimit value to 5000. Open 10.129.8.223:80 Open 10.129.8.223:5985 [~] Starting Script(s) [>] Running script "nmap -vvv -p {{port}} -{{ipversion}} {{ip}} -A -sCV -oN monitorsfour.txt" on ip 10.129.8.223 Depending on the complexity of the script, results may take some time to appear. [~] Starting Nmap 7.98 ( https://nmap.org ) at 2026-01-29 19:59 +0100 NSE: Loaded 158 scripts for scanning. NSE: Script Pre-scanning. NSE: Starting runlevel 1 (of 3) scan. Initiating NSE at 19:59 Completed NSE at 19:59, 0.00s elapsed NSE: Starting runlevel 2 (of 3) scan. Initiating NSE at 19:59 Completed NSE at 19:59, 0.00s elapsed NSE: Starting runlevel 3 (of 3) scan. Initiating NSE at 19:59 Completed NSE at 19:59, 0.00s elapsed Initiating Ping Scan at 19:59 Scanning 10.129.8.223 [2 ports] Completed Ping Scan at 19:59, 0.01s elapsed (1 total hosts) Initiating Connect Scan at 19:59 Scanning monitorsfour.htb (10.129.8.223) [2 ports] Discovered open port 80/tcp on 10.129.8.223 Discovered open port 5985/tcp on 10.129.8.223 Completed Connect Scan at 19:59, 0.01s elapsed (2 total ports) Initiating Service scan at 19:59 Scanning 2 services on monitorsfour.htb (10.129.8.223) Completed Service scan at 19:59, 6.06s elapsed (2 services on 1 host) NSE: Script scanning 10.129.8.223. NSE: Starting runlevel 1 (of 3) scan. Initiating NSE at 19:59 Completed NSE at 19:59, 5.05s elapsed NSE: Starting runlevel 2 (of 3) scan. Initiating NSE at 19:59 Completed NSE at 19:59, 0.08s elapsed NSE: Starting runlevel 3 (of 3) scan. Initiating NSE at 19:59 Completed NSE at 19:59, 0.00s elapsed Nmap scan report for monitorsfour.htb (10.129.8.223) Host is up, received syn-ack (0.0090s latency). Scanned at 2026-01-29 19:59:09 CET for 11s PORT PORT STATE SERVICE REASON VERSION 80/tcp open http syn-ack nginx |_http-favicon: Unknown favicon MD5: 889DCABDC39A9126364F6A675AA4167D | http-methods: |_ Supported Methods: GET | http-cookie-flags: | /: | PHPSESSID: |_ httponly flag not set |_http-title: MonitorsFour - Networking Solutions 5985/tcp open http syn-ack Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP) |_http-title: Not Found |_http-server-header: Microsoft-HTTPAPI/2.0 Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows NSE: Script Post-scanning. NSE: Starting runlevel 1 (of 3) scan. Initiating NSE at 19:59 Completed NSE at 19:59, 0.00s elapsed NSE: Starting runlevel 2 (of 3) scan. Initiating NSE at 19:59 Completed NSE at 19:59, 0.00s elapsed NSE: Starting runlevel 3 (of 3) scan. Initiating NSE at 19:59 Completed NSE at 19:59, 0.00s elapsed Read data files from: /usr/bin/../share/nmap Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 11.44 seconds ...