Lo-Fi - THM

Posted Apr 26, 2026 Updated May 25, 2026

By 0xR0_

2 min read

Vamos a hacer un nmap:

  
┌──(pylon㉿kali)-[~/Desktop/pylon/THM/lofi]
└─$ nmap -p- --open -sS -n -Pn 10.80.155.64 -vvv
Starting Nmap 7.98 ( https://nmap.org ) at 2026-01-24 23:35 +0100
Initiating SYN Stealth Scan at 23:35
Scanning 10.80.155.64 [65535 ports]
Discovered open port 22/tcp on 10.80.155.64
Discovered open port 80/tcp on 10.80.155.64
Completed SYN Stealth Scan at 23:35, 14.36s elapsed (65535 total ports)
Nmap scan report for 10.80.155.64
Host is up, received user-set (0.044s latency).
Scanned at 2026-01-24 23:35:24 CET for 14s
Not shown: 65533 closed tcp ports (reset)
PORT   STATE SERVICE REASON
22/tcp open  ssh     syn-ack ttl 62
80/tcp open  http    syn-ack ttl 61

Read data files from: /usr/share/nmap
Nmap done: 1 IP address (1 host up) scanned in 14.44 seconds
           Raw packets sent: 65535 (2.884MB) | Rcvd: 65535 (2.621MB)

Vemos el puerto 22 y 80. Vamos a realizar un segundo escaneo para obtener más información como que versiones del servicio están corriendo:

  
┌──(pylon㉿kali)-[~/Desktop/pylon/THM/lofi]
└─$ nmap -p22,80 -sCV 10.80.155.64
Starting Nmap 7.98 ( https://nmap.org ) at 2026-01-24 23:36 +0100
Nmap scan report for 10.80.155.64
Host is up (0.044s latency).

PORT   STATE SERVICE VERSION
22/tcp open  ssh     OpenSSH 8.2p1 Ubuntu 4ubuntu0.4 (Ubuntu Linux; protocol 2.0)
| ssh-hostkey:
|   3072 53:34:fc:61:ef:7f:54:6c:86:59:32:a3:5c:10:6e:9c (RSA)
|   256 e0:4f:a9:eb:7c:e3:54:d5:69:69:d2:69:99:13:f9:8e (ECDSA)
|_  256 04:56:51:2c:a4:d5:64:8d:45:ee:8f:aa:3e:01:4b:da (ED25519)
80/tcp open  http    Apache httpd 2.2.22 ((Ubuntu))
|_http-server-header: Apache/2.2.22 (Ubuntu)
|_http-title: Lo-Fi Music
Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel

Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 8.79 seconds