3 packets received by filter, 0 packets dropped by kernel Ending arp-scan 1.10.0: 256 hosts scanned in 2.023 seconds (126.54 hosts/sec). 3 responded ┌──(root㉿kali)-[~] └─# nmap -sC -sV -p- 192.168.56.109 Starting Nmap 7.95 ( https://nmap.org ) at 2025-10-09 13:18 +08 Nmap scan report for 192.168.56.109 Host is up (0.00049s latency). Not shown: 65533 closed tcp ports (reset) PORT STATE SERVICE VERSION 22/tcp open ssh OpenSSH 8.4p1 Debian 5+deb11u3 (protocol 2.0) | ssh-hostkey: | 3072 f6:a3:b6:78:c4:62:af:44:bb:1a:a0:0c:08:6b:98:f7 (RSA) | 256 bb:e8:a2:31:d4:05:a9:c9:31:ff:62:f6:32:84:21:9d (ECDSA) |_ 256 3b:ae:34:64:4f:a5:75:b9:4a:b9:81:f9:89:76:99:eb (ED25519) 80/tcp open http Apache httpd 2.4.62 ((Debian)) |_http-title: AWK Command Runner |_http-server-header: Apache/2.4.62 (Debian) MAC Address: 08:00:27:B2:B2:CB (PCS Systemtechnik/Oracle VirtualBox virtual NIC) Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 21.16 seconds
twansh@Ronos:/$ cd var twansh@Ronos:/var$ ls backups cache lib local lock log mail opt run spool tmp www twansh@Ronos:/var$ cd backups twansh@Ronos:/var/backups$ ls alternatives.tar.0 apt.extended_states.1.gz apt.extended_states.3.gz cron.bak dpkg.statoverride.0 group.bak passwd.bak apt.extended_states.0 apt.extended_states.2.gz apt.extended_states.4.gz dpkg.diversions.0 dpkg.status.0 gshadow.bak shadow.bak twansh@Ronos:/var/backups$ cat passwd.bak cat: passwd.bak: Permission denied twansh@Ronos:/var/backups$ cak cron.bak -bash: cak: command not found twansh@Ronos:/var/backups$ cat cron.bak # Edit this file to introduce tasks to be run by cron. # # Each task to run has to be defined through a single line # indicating with different fields when the task will be run # and what command to run for the task # # To define the time you can provide concrete values for # minute (m), hour (h), day of month (dom), month (mon), # and day of week (dow) or use '*' in these fields (for 'any'). # # Notice that tasks will be started based on the cron's system # daemon's notion of time and timezones. # # Output of the crontab jobs (including errors) is sent through # email to the user the crontab file belongs to (unless redirected). # # For example, you can run a backup of all your user accounts # at 5 a.m every week with: # 0 5 * * 1 tar -zcf /var/backups/home.tgz /home/ # # For more information see the manual pages of crontab(5) and cron(8) # # m h dom mon dow command * * * * * /tmp/back.sh