Academy - Getting Started - Service Scanning

HTB Content Academy
1

Hi,

I am stuck. The question in Service Scanning in Getting Started asks what is the version of the service running on port 8080 but no version comes back when I run -sV (as the hint says). When I connect to 8080 I can trigger an Apache Tomcat error that shows version 9.0.31. However, I keep getting Error when I submit the result.

Any help would be greatly appreciated!

service
service1920×1200 110 KB

2

The version is not a number for that challenge apparently.

‘Apache Tomcat’ is the version.

Not sure what HTB Academy team is doing.

3 Likes
3

I spent way too much time trying different ways of getting a version number with Nmap -sV, apache scripts etc…) than I would like to admit. Thank you for this post. I never would have gotten that. I was sure they wanted a version number.

4

Hi, I think there is an issue on here now, Apache Tomcat is not showing as result of the scan.

nmap -sV -p8080 10.129.19.11
Starting Nmap 7.94SVN ( https://nmap.org ) at 2024-07-03 13:25 EEST
Nmap scan report for 10.129.19.11
Host is up (0.079s latency).

PORT     STATE SERVICE    VERSION
8080/tcp open  http-proxy
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port8080-TCP:V=7.94SVN%I=7%D=7/3%Time=6685272B%P=x86_64-pc-linux-gnu%r(
SF:HTTPOptions,7D,"HTTP/1\.1\x20200\x20\r\nAllow:\x20OPTIONS,\x20GET,\x20H
SF:EAD,\x20POST\r\nContent-Length:\x200\r\nDate:\x20Wed,\x2003\x20Jul\x202
SF:024\x2010:25:47\x20GMT\r\nConnection:\x20close\r\n\r\n")%r(FourOhFourRe
SF:quest,390,"HTTP/1\.1\x20404\x20\r\nContent-Type:\x20text/html;charset=u
SF:tf-8\r\nContent-Language:\x20en\r\nContent-Length:\x20757\r\nDate:\x20W
SF:ed,\x2003\x20Jul\x202024\x2010:25:53\x20GMT\r\nConnection:\x20close\r\n
SF:\r\n<!doctype\x20html><html\x20lang=\"en\"><head><title>HTTP\x20Status\
SF:x20404\x20\xe2\x80\x93\x20Not\x20Found</title><style\x20type=\"text/css
SF:\">body\x20{font-family:Tahoma,Arial,sans-serif;}\x20h1,\x20h2,\x20h3,\
SF:x20b\x20{color:white;background-color:#525D76;}\x20h1\x20{font-size:22p
SF:x;}\x20h2\x20{font-size:16px;}\x20h3\x20{font-size:14px;}\x20p\x20{font
SF:-size:12px;}\x20a\x20{color:black;}\x20\.line\x20{height:1px;background
SF:-color:#525D76;border:none;}</style></head><body><h1>HTTP\x20Status\x20
SF:404\x20\xe2\x80\x93\x20Not\x20Found</h1><hr\x20class=\"line\"\x20/><p><
SF:b>Type</b>\x20Status\x20Report</p><p><b>Message</b>\x20&#47;nice%20port
SF:s%2C&#47;Tri%6Eity\.txt%2ebak</p><p><b>Description</b>\x20The\x20origin
SF:\x20server\x20did\x20not\x20find\x20a\x20current\x20representation\x20f
SF:or\x20the\x20target\x20resource\x20or\x20is\x20not\x20willing\x20to\x20
SF:disclose\x20that\x20one\x20exists\.</p><hr\x20class=\"line\"\x20/><h3>A
SF:pache\x20Tomcat/9\.0\.31\x20\(Ubuntu\)</h3></");

Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 188.84 seconds
5

HI, use sudo nmap -sV target

6

You can get web server’s version using whatweb if you don’t want to take the nmap route :slight_smile:

7

I was stuck on this too, thanks for this thread :pray:

The “real” version of the service can be retrieved by visiting the port in your web browser, but unfortunately that doesn’t count as the answer.