HTB : ADMIRER Initian Recon sudo nmap -sS -sC -sV 10.10.10.187 > rec_ini From the initial recon I find the following things : The ftp server is open The ssh is open which might be useful later on The http port is open - There is an admir-dir There is a robots.txt which has one disallowed entry The http name of the box is Admirer During this time let the complete port scan run in the background