_raw: gobuster dir -k -u https://chat.allports.tours/ -w /usr/share/seclists/Discovery/Web-Content/raft-medium-directories.txt -x html,php,py


_raw: gobuster dir -k -u http://chat.allports.tours/ -w /usr/share/seclists/Discovery/Web-Content/raft-medium-directories.txt -x html,php,py


_raw: gobuster dir -k -u http://admin.rooms.allports.tours/ -w /usr/share/seclists/Discovery/Web-Content/raft-medium-directories.txt -x html,php,


_raw: gobuster dir -k -u http://admin.rooms.allports.tours/ -w /usr/share/seclists/Discovery/Web-Content/raft-medium-directories.txt


_raw: gobuster dir -k -u https://admin.rooms.allports.tours/ -w /usr/share/seclists/Discovery/Web-Content/raft-medium-directories.txt


_raw: python3 /opt/nginxpwner/nginx-pwner-no-server-header.py https://chat.allports.tours ./endpoints


_raw: python3 /opt/nginxpwner/nginx-pwner-no-server-header.py https://chat.allports.tours endpoints


_raw: python3 /opt/nginxpwner/nginxpwner.py https://chat.allports.tours endpoints


_raw: python3 /opt/nginxpwner/nginxpwner.py https://chat.allports.tours/ endpoints


_raw: pip install requests_raw --break-system-packages


_raw: python3 -m flask_unsign --unsign --cookie 'eyJjc3JmX3Rva2VuIjoiYmZiMWRiMjg0ZjQyN2YxZjJlY2MwNGZlNmNkZGM2NDY3OTBlNjcxNCJ9.aQZn2A.OrjckNq0M50_11BuUvQHPK168y0'


_raw: python3 -m flask_unsign --unsign --cookie 'eyJjc3JmX3Rva2VuIjoiYmZiMWRiMjg0ZjQyN2YxZjJlY2MwNGZlNmNkZGM2NDY3OTBlNjcxNCJ9.aQZn2A.OrjckNq0M50_11BuUvQHPK168y0' --wordlist /usr/share/wordlists/rockyou.txt --no-literal-eval


_raw: python3 -m flask_unsign --unsign --cookie 'eyJjc3JmX3Rva2VuIjoiYmZiMWRiMjg0ZjQyN2YxZjJlY2MwNGZlNmNkZGM2NDY3OTBlNjcxNCJ9.aQZn2A.OrjckNq0M50_11BuUvQHPK168y0' --wordlist /usr/share/wordlists/rockyou.txt


_raw: python3 -m flask_unsign --decode --server 'https://chat.allports.tours/login'


_raw: python3 -m flask_unsign --decode --server 'https://chat.allports.tours'


_raw: python3 -m flask_unsign --decode --cookie 'eyJjc3JmX3Rva2VuIjoiYmZiMWRiMjg0ZjQyN2YxZjJlY2MwNGZlNmNkZGM2NDY3OTBlNjcxNCJ9.aQZn2A.OrjckNq0M50_11BuUvQHPK168y0'


_raw: gobuster dir -k -u https://chat.allports.tours/ -w /usr/share/seclists/Discovery/Web-Content/raft-medium-directories.txt


_raw: gobuster dir -k -u https://chat.allports.tours:443/ -w /usr/share/seclists/Discovery/Web-Content/raft-medium-directories.txt


_raw: ffuf -ic -w /usr/share/seclists/Discovery/Web-Content/directory-list-2.3-medium.txt -u "http://rooms.allports.tours/dashboard/FUZZ"


_raw: ffuf -ic -w /usr/share/seclists/Discovery/Web-Content/directory-list-2.3-medium.txt


_raw: fuff -ic -w /usr/share/seclists/Discovery/Web-Content/directory-list-2.3-medium.txt


_raw: python3 -m pip install -r requirements.txt


_raw: curl -A "Mozilla/5.0 (Linux; Android 8.1.0; Armor_3 Build/O11019; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/69.0.3497.100 Mobile Safari/537.36" -k https://10.0.1.14:443/sitemap.xml -sL


_raw: curl -A "Mozilla/5.0 (Linux; Android 8.1.0; Armor_3 Build/O11019; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/69.0.3497.100 Mobile Safari/537.36" -k https://10.0.1.14:443/sitemap.xml


_raw: gobuster dir -k -u https://10.0.1.14:443/ -w /usr/share/seclists/Discovery/Web-Content/raft-medium-directories.txt


_raw: gobuster dir -k -u https://10.0.1.14:443/ -w /usr/share/wordlists/dirb/common.txt


_raw: systemctl start docker-compose-gvm-scanner.service htp[


_raw: gobuster dir -k -u http://10.0.1.14:5001/ -w /usr/share/wordlists/dirb/common.txt -b 200


_raw: gobuster dir -k -u http://10.0.1.14:5001/ -w /usr/share/wordlists/dirb/common.txt


_raw: gobuster dir -k -u https://10.0.1.14:5001/ -w /usr/share/wordlists/dirb/common.txt


_raw: gobuster -k dir -u http://10.0.1.14/ -w /usr/share/wordlists/dirb/common.txt


_raw: curl -A "Mozilla/5.0 (Linux; Android 8.1.0; Armor_3 Build/O11019; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/69.0.3497.100 Mobile Safari/537.36" -k https://10.0.1.14:443/robots.txt


_raw: curl -A "Mozilla/5.0 (Linux; Android 8.1.0; Armor_3 Build/O11019; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/69.0.3497.100 Mobile Safari/537.36" -k https://10.0.1.14:443/1


_raw: curl -A "Mozilla/5.0 (Linux; Android 8.1.0; Armor_3 Build/O11019; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/69.0.3497.100 Mobile Safari/537.36" https://10.0.1.14:443/


_raw: curl -A "Mozilla/5.0 (Linux; Android 8.1.0; Armor_3 Build/O11019; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/69.0.3497.100 Mobile Safari/537.36" http://10.0.1.14:80/


_raw: curl -A "Mozilla/5.0 (Linux; Android 8.1.0; Armor_3 Build/O11019; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/69.0.3497.100 Mobile Safari/537.36" http://10.0.1.14:5001/


_raw: curl -A "Mozilla/5.0 (Linux; Android 8.1.0; Armor_3 Build/O11019; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/69.0.3497.100 Mobile Safari/537.36" https://10.0.1.14:5001/


_raw: curl -A "Mozilla/5.0 (Linux; Android 8.1.0; Armor_3 Build/O11019; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/69.0.3497.100 Mobile Safari/537.36" https://10.0.1.4:5001/


_raw: gobuster dir -k -u https://10.0.1.14/ -w /usr/share/wordlists/dirb/common.txt


_raw: gobuster -k dir -u https://10.0.1.14/ -w /usr/share/wordlists/dirb/common.txt


_raw: gobuster dir -u https://10.0.1.14/ -w /usr/share/wordlists/dirb/common.txt


_raw: gobuster dir -u http://10.0.1.14/ -w /usr/share/wordlists/dirb/common.txt


_raw: gobuster dir -u http://10.0.1.4/ -w /usr/share/wordlists/dirb/common.txt


_raw: nmap -sC -sV -p- 10.0.1.14 -oN scans/all_full_ports.txt


_raw: Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel


_raw: 22/tcp   open  ssh      OpenSSH 8.9p1 Ubuntu 3ubuntu0.13 (Ubuntu Linux; protocol 2.0)


_raw: Not shown: 996 filtered tcp ports (no-response)


_raw: Starting Nmap 7.95 ( https://nmap.org ) at 2025-11-01 13:38 EDT


_raw: sudo nmap -Pn  -n --disable-arp-ping -p- -sV -sC 10.0.1.15


_raw: sudo nmap -Pn  -n --disable-arp-ping -sT -p- -sV -sC 10.0.1.15


_raw: nxc smb 10.0.1.20 -u 'bfinn' -p 'Summer2025!' --shares


_raw: kerbrute userenum -d allports.local --dc 10.0.1.6 users.txt


_raw: kerbrute userenum -d prod.allports.local --dc 10.0.1.6 users


_raw: dnsrecon -a -d prod.allports.local -n 10.0.1.6


_raw: dnsrecon -a -d allports.local -n 10.0.1.6


_raw: msfconsole -q -x 'use auxiliary/scanner/smb/smb_lookupsid ; set RHOST 10.0.1.6 ; run ; exit'


_raw: kerbrute userenum -d allports.local --dc 10.0.1.6 'captain'


_raw: kerbrute userenum -d allports.local --dc 10.0.1.6 jsmith.txt


_raw: kerbrute userenum -d allports.local --dc 10.0.1.6 users1.txt


_raw: nxc smb 10.0.1.6 -u 'jmeyer' -p '' --shares


_raw: crackmapexec smb allports.local --shares


_raw: ldapsearch -x -H ldap://10.0.1.6 -b "DC=allports,DC=local" -s sub "*"


_raw: ldapsearch -h 10.0.1.6 -x -b "DC=allports,DC=local" -s sub "*"


_raw: netexec smb 10.0.1.6 -u '' -p '' --users


_raw: nxc smb 10.0.1.6 -u 'bfinn' -p '' --shares


_raw: nxc smb 10.0.1.6 -u 'bfinn' -p 'Password123!' --shares


_raw: nxc smb 10.0.1.6 -u 'bfinn' -p 'Password123' --shares


_raw: nxc smb 10.0.1.6 -u 'bfinn' -p 'allports' --shares


_raw: nxc smb 10.0.1.6 -u 'bfinn' -p 'password' --shares


_raw: kerbrute userenum -d allports.local --dc 10.0.1.6 users.txt


_raw: ldapsearch -x -H ldap://10.0.1.6 -b "DC=allports,DC=local"


_raw: ldapsearch -x -H ldap://10.0.1.6 -s base -b "DC=allports,DC=local"


_raw: ldapsearch -x -H ldap://10.0.1.6 -s base -b "" "(objectClass=*)" namingContexts


_raw: ldapsearch -x -H ldap://10.0.1.6 -b "DC=domain,DC=com"


_raw: ldapsearch -x -H ldap://10.0.1.6 -s base -b "DC=domain,DC=com"


_raw: nxc smb 10.0.1.21 -u 'guest' -p '' --shares


_raw: nxc smb 10.0.1.20 -u 'guest' -p '' --shares


_raw: nxc smb 10.0.1.6 -u 'guest' -p '' --shares


_raw: docker compose down; docker compose up --build -d


_raw: docker compose down; docker compose up --build


_raw: docker compose down; docker compse up --build


_raw: docker compose down; docker compse up --rebuild