Skip to main content
Information Security

Return to Question

Tweeted twitter.com/StackSecurity/status/832665473846239232
added 16 characters in body; edited tags; edited title
Source Link
Gilles 'SO- stop being evil'
Gilles 'SO- stop being evil'
  • 52.4k
  • 14
  • 126
  • 184

I am starting with Nmap I want to know what this Meaning of ssl-cert section meansin nmap output

I am trying to learn the basics about security so I started by scanning the IP of a friend using Nmap, I have some questions about this section:

PORT STATE SERVICE VERSION

3389/tcp open tcpwrapped

| ssl-cert: Subject: commonName=Ventas-gp-1

| Issuer: commonName=Ventas-gp-1

| Public Key type: rsa

| Public Key bits: 2048

| Signature Algorithm: sha1WithRSAEncryption

| Not valid before: 2016-09-25T12:11:37

| Not valid after: 2017-03-27T12:11:37

| MD5: 95cf e484 a18f 98d1 49f1 186b 45ad ee62

|_SHA-1: 53c8 b5f3 4424 0863 7d2e 42e3 f09c 3148 1c1d dafa

|_ssl-date: 2017-02-17T12:41:06+00:00; +2m26s from scanner

PORT     STATE SERVICE    VERSION
3389/tcp open  tcpwrapped
| ssl-cert: Subject: commonName=Ventas-gp-1
| Issuer: commonName=Ventas-gp-1
| Public Key type: rsa
| Public Key bits: 2048
| Signature Algorithm: sha1WithRSAEncryption
| Not valid before: 2016-09-25T12:11:37
| Not valid after:  2017-03-27T12:11:37
| MD5:   95cf e484 a18f 98d1 49f1 186b 45ad ee62
|_SHA-1: 53c8 b5f3 4424 0863 7d2e 42e3 f09c 3148 1c1d dafa
|_ssl-date: 2017-02-17T12:41:06+00:00; +2m26s from scanner

This is obviously about a Remote Desktop, but with all the information about encryption, could this be used to crack the windows password? passing this data to "John the ripper" for example

Also in this network there is a Voip phone, this phone is in the DMZ of the router and also in the router the TCP 5060 is open, but none of this are shown in my Nmapnmap output, I want to know why? I am using: -T4 -A -v

Thanks-T4 -A -v

I am starting with Nmap I want to know what this section means

I am trying to learn the basics about security so I started by scanning the IP of a friend using Nmap, I have some questions about this section:

PORT STATE SERVICE VERSION

3389/tcp open tcpwrapped

| ssl-cert: Subject: commonName=Ventas-gp-1

| Issuer: commonName=Ventas-gp-1

| Public Key type: rsa

| Public Key bits: 2048

| Signature Algorithm: sha1WithRSAEncryption

| Not valid before: 2016-09-25T12:11:37

| Not valid after: 2017-03-27T12:11:37

| MD5: 95cf e484 a18f 98d1 49f1 186b 45ad ee62

|_SHA-1: 53c8 b5f3 4424 0863 7d2e 42e3 f09c 3148 1c1d dafa

|_ssl-date: 2017-02-17T12:41:06+00:00; +2m26s from scanner

This is obviously about a Remote Desktop, but with all the information about encryption, could this be used to crack the windows password? passing this data to "John the ripper" for example

Also in this network there is a Voip phone, this phone is in the DMZ of the router and also in the router the TCP 5060 is open, but none of this are shown in my Nmap output, I want to know why? I am using: -T4 -A -v

Thanks

Meaning of ssl-cert section in nmap output

I am trying to learn the basics about security so I started by scanning the IP of a friend using Nmap, I have some questions about this section:

PORT     STATE SERVICE    VERSION
3389/tcp open  tcpwrapped
| ssl-cert: Subject: commonName=Ventas-gp-1
| Issuer: commonName=Ventas-gp-1
| Public Key type: rsa
| Public Key bits: 2048
| Signature Algorithm: sha1WithRSAEncryption
| Not valid before: 2016-09-25T12:11:37
| Not valid after:  2017-03-27T12:11:37
| MD5:   95cf e484 a18f 98d1 49f1 186b 45ad ee62
|_SHA-1: 53c8 b5f3 4424 0863 7d2e 42e3 f09c 3148 1c1d dafa
|_ssl-date: 2017-02-17T12:41:06+00:00; +2m26s from scanner

This is obviously about a Remote Desktop, but with all the information about encryption, could this be used to crack the windows password? passing this data to "John the ripper" for example

Also in this network there is a Voip phone, this phone is in the DMZ of the router and also in the router the TCP 5060 is open, but none of this are shown in my nmap output, I want to know why? I am using: -T4 -A -v

Source Link
Giovanni El Zelah
Giovanni El Zelah
  • 41
  • 2

I am starting with Nmap I want to know what this section means

I am trying to learn the basics about security so I started by scanning the IP of a friend using Nmap, I have some questions about this section:

PORT STATE SERVICE VERSION

3389/tcp open tcpwrapped

| ssl-cert: Subject: commonName=Ventas-gp-1

| Issuer: commonName=Ventas-gp-1

| Public Key type: rsa

| Public Key bits: 2048

| Signature Algorithm: sha1WithRSAEncryption

| Not valid before: 2016-09-25T12:11:37

| Not valid after: 2017-03-27T12:11:37

| MD5: 95cf e484 a18f 98d1 49f1 186b 45ad ee62

|_SHA-1: 53c8 b5f3 4424 0863 7d2e 42e3 f09c 3148 1c1d dafa

|_ssl-date: 2017-02-17T12:41:06+00:00; +2m26s from scanner

This is obviously about a Remote Desktop, but with all the information about encryption, could this be used to crack the windows password? passing this data to "John the ripper" for example

Also in this network there is a Voip phone, this phone is in the DMZ of the router and also in the router the TCP 5060 is open, but none of this are shown in my Nmap output, I want to know why? I am using: -T4 -A -v

Thanks