❯ sudo arp-scan -l [sudo] password for Pepster: Interface: eth0, type: EN10MB, MAC: 5e:bb:f6:9e:ee:fa, IPv4: 192.168.60.100 Starting arp-scan 1.10.0 with 256 hosts (https://github.com/royhills/arp-scan) 192.168.60.1 00:50:56:c0:00:08 VMware, Inc. 192.168.60.2 00:50:56:e4:1a:e5 VMware, Inc. 192.168.60.183 08:00:27:a6:8e:72 PCS Systemtechnik GmbH 192.168.60.254 00:50:56:ef:e0:77 VMware, Inc.
4 packets received by filter, 0 packets dropped by kernel Ending arp-scan 1.10.0: 256 hosts scanned in 2.031 seconds (126.05 hosts/sec). 4 responded ❯ export ip=192.168.60.183 ❯ rustscan -a $ip .----. .-. .-. .----..---. .----. .---. .--. .-. .-. | {} }| { } |{ {__ {_ _}{ {__ / ___} / {} \ | `| | | .-. \| {_} |.-._} } | | .-._} }\ }/ /\ \| |\ | `-' `-'`-----'`----' `-' `----' `---' `-' `-'`-' `-' The Modern Day Port Scanner. ________________________________________ : http://discord.skerritt.blog : : https://github.com/RustScan/RustScan : -------------------------------------- I don't always scan ports, but when I do, I prefer RustScan.
[~] The config file is expected to be at "/home/Pepster/.rustscan.toml" [!] File limit is lower than default batch size. Consider upping with --ulimit. May cause harm to sensitive servers [!] Your file limit is very small, which negatively impacts RustScan's speed. Use the Docker image, or up the Ulimit with '--ulimit 5000'. Open 192.168.60.183:80 [~] Starting Script(s) [~] Starting Nmap 7.95 ( https://nmap.org ) at 2025-05-15 15:02 CST Initiating ARP Ping Scan at 15:02 Scanning 192.168.60.183 [1 port] Completed ARP Ping Scan at 15:02, 0.07s elapsed (1 total hosts) Initiating Parallel DNS resolution of 1 host. at 15:02 Completed Parallel DNS resolution of 1 host. at 15:02, 0.00s elapsed DNS resolution of 1 IPs took 0.00s. Mode: Async [#: 1, OK: 0, NX: 1, DR: 0, SF: 0, TR: 1, CN: 0] Initiating SYN Stealth Scan at 15:02 Scanning 192.168.60.183 [1 port] Discovered open port 80/tcp on 192.168.60.183 Completed SYN Stealth Scan at 15:02, 0.04s elapsed (1 total ports) Nmap scan report for 192.168.60.183 Host is up, received arp-response (0.0012s latency). Scanned at 2025-05-15 15:02:13 CST for 0s PORT STATE SERVICE REASON 80/tcp open http syn-ack ttl 63 MAC Address: 08:00:27:A6:8E:72 (PCS Systemtechnik/Oracle VirtualBox virtual NIC) Read data files from: /usr/share/nmap Nmap done: 1 IP address (1 host up) scanned in 0.39 seconds Raw packets sent: 2 (72B) | Rcvd: 5 (798B)
root@ubuntu:~# ping6 -I eth0 -c 5 ff02::1 ping6: Warning: source address might be selected on device other than: eth0 PING ff02::1(ff02::1) from :: eth0: 56 data bytes 64 bytes from fe80::dea1:f7ff:fe82:7613%eth0: icmp_seq=1 ttl=64 time=0.058 ms 64 bytes from fe80::216:3eff:fe00:0%eth0: icmp_seq=1 ttl=64 time=0.077 ms 64 bytes from fe80::dea1:f7ff:fe82:7613%eth0: icmp_seq=2 ttl=64 time=0.036 ms 64 bytes from fe80::216:3eff:fe00:0%eth0: icmp_seq=2 ttl=64 time=0.052 ms ^C --- ff02::1 ping statistics --- 2 packets transmitted, 2 received, +2 duplicates, 0% packet loss, time 1028ms rtt min/avg/max/mdev = 0.036/0.055/0.077/0.014 ms root@ubuntu:~# ip a|grep inet6 |awk '{print $2}' ::1/128 fe80::dea1:f7ff:fe82:7613/64 root@ubuntu:~# ssh root@fe80::216:3eff:fe00:0%eth0 Linux airbind 6.1.0-18-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.76-1 (2024-02-01) x86_64
The programs included with the Debian GNU/Linux system are free software; the exact distribution terms for each program are described in the individual files in /usr/share/doc/*/copyright.
Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent permitted by applicable law. root@airbind:~# cat root.txt 2bd693135712f88726c22770278a2dcf
