last night, I scanned bashed with nmap and find that there are 3 open ports including 80 and 8000… i access the machine with port 8000 using my browser and get the linux system hierarchy… next morning i scanned the box again and found only one port is open (port 80) i already tried to reset the machine.
I think only port 80 supposed to be open, Maybe someone was working on it and changed something.
Yep. Port 8000 being open is probably someone running SimpleHTTPServer to exfil files. It should not be open.
Bashed is down? a can’t acess this.