HTB : TABBY Initial Recon I started the initial recon using nmap nmap -sS -sC -sV 10.10.10.194 > rec_ini So we that a http server is open and an Apache tomcat server is also open, along with an ssh I’ll let the al ports scan run in the backgroun while I check the web page and the tomcat. nmap -p- -T5 10.10.10.194 > all_ports After looking at the home page I couldn’t find much at the home page.