# Cap
## Reconnaissance
First we want to run a initial nmap scan to see what ports are open and what services are on those ports.
```hcl
nmap -sC -sV -oA nmap/init 10.129.141.123
```
* **-sC**: run default nmap scripts
* **-sV**: detect service version
* **-oA**: output all formats to *nmap/initial*
We get back the following information:
* **Port 21:** running vsftpd version 3.0.3
* **Port 22:** running OpenSSH version 8.2p1 Ubuntu 4ubuntu0.2
* **Port 80:** running gunicorn web server
{% code title="init.nmap" %}
```hcl
# Nmap 7.92 scan initiated Tue Mar 22 18:25:26 2022 as: nmap -sC -sV -oA nmap/init 10.129.141.123
Nmap scan report for 10.129.141.123
Host is up (0.039s latency).
Not shown: 997 closed tcp ports (reset)
PORT STATE SERVICE VERSION
21/tcp open ftp vsftpd 3.0.3
22/tcp open ssh OpenSSH 8.2p1 Ubuntu 4ubuntu0.2 (Ubuntu Linux; protocol 2.0)
| ssh-hostkey:
| 3072 fa:80:a9:b2:ca:3b:88:69:a4:28:9e:39:0d:27:d5:75 (RSA)
| 256 96:d8:f8:e3:e8:f7:71:36:c5:49:d5:9d:b6:a4:c9:0c (ECDSA)
|_ 256 3f:d0:ff:91:eb:3b:f6:e1:9f:2e:8d:de:b3:de:b2:18 (ED25519)
80/tcp open http gunicorn
| fingerprint-strings:
| FourOhFourRequest:
| HTTP/1.0 404 NOT FOUND
| Server: gunicorn
| Date: Tue, 22 Mar 2022 22:25:38 GMT
| Connection: close
| Content-Type: text/html; charset=utf-8
| Content-Length: 232
|
| 404 Not Found
|
Not Found
|
The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.