Pentesting Reconnaissance Project - The Lovers

Pentesting Reconnaissance Project – The Lovers

This project marks the beginning of the pentest on the vulnerable machine The Lovers. Your mission is to perform network and service reconnaissance on the target machine, in order to map the attack surface and lay the groundwork for later phases.

At this stage, do not exploit vulnerabilities. Only identify:

• The IP address of the victim machine.
• The exposed ports and services.
• The estimated operating system.
• The existence of an HTTP service for later analysis.

Requirements

1. The Lovers virtual machine. Download the VM from this link:

1   https://storage.googleapis.com/cybersecurity-machines/lovers-lab.ova

1. Attacker machine: Kali Linux.

📝 Instructions

1. Discover the IP address of The Lovers.
2. Scan the ports using Nmap.
3. Identify the operating system. Review the Nmap output to infer the OS.
4. Detect the HTTP service. Check if there is a web port (80, 8080, or similar). If present, confirm by opening the IP in your browser.
5. Document your findings, do not attempt exploitation yet.

Submission

Submit a PDF report including:

• Commands used.
• Screenshots of relevant outputs.
• Results (machine IP, table of ports and services, OS hypothesis, HTTP service confirmation).