DVWA

$ sudo nmap -sV -O -n --script fingerprint-strings 192.168.122.2
Starting Nmap 7.92 ( https://nmap.org ) at 2023-06-01 05:50 UTC
Nmap scan report for 192.168.122.2
Host is up (0.00047s latency).
Not shown: 999 closed tcp ports (reset)
PORT   STATE SERVICE VERSION
80/tcp open  http    Apache httpd 2.4.25 ((Debian))
|_http-server-header: Apache/2.4.25 (Debian)
MAC Address: 02:42:C0:A8:7A:02 (Unknown)
Device type: general purpose
Running: Linux 4.X|5.X
OS CPE: cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:5
OS details: Linux 4.15 - 5.6
Network Distance: 1 hop

OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 8.78 seconds

$ nikto -host 192.168.122.2 
- Nikto v2.5.0
---------------------------------------------------------------------------
+ Target IP:          192.168.122.2
+ Target Hostname:    192.168.122.2
+ Target Port:        80
+ Start Time:         2023-06-01 02:07:42 (GMT-4)
---------------------------------------------------------------------------
+ Server: Apache/2.4.25 (Debian)
+ /: The anti-clickjacking X-Frame-Options header is not present. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options
+ /: The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type. See: https://www.netsparker.com/web-vulnerability-scanner/vulnerabilities/missing-content-type-header/
+ /: Cookie PHPSESSID created without the httponly flag. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies
+ /: Cookie security created without the httponly flag. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies
+ Root page / redirects to: login.php
+ No CGI Directories found (use '-C all' to force check all possible dirs)
+ Apache/2.4.25 appears to be outdated (current is at least Apache/2.4.54). Apache 2.2.34 is the EOL for the 2.x branch.
+ /config/: Directory indexing found.
+ /config/: Configuration information may be available remotely.
+ /docs/: Directory indexing found.
+ /icons/README: Apache default file found. See: https://www.vntweb.co.uk/apache-restricting-access-to-iconsreadme/
+ /login.php: Admin login page/section found.
+ /.gitignore: .gitignore file found. It is possible to grasp the directory structure.
+ 8102 requests: 0 error(s) and 11 item(s) reported on remote host
+ End Time:           2023-06-01 02:08:06 (GMT-4) (24 seconds)
---------------------------------------------------------------------------
+ 1 host(s) tested

$ nmap --script http-sitemap-generator -p 80 192.168.122.2
Starting Nmap 7.92 ( https://nmap.org ) at 2023-06-01 07:11 UTC
Nmap scan report for 192.168.122.2
Host is up (0.00025s latency).

PORT   STATE SERVICE
80/tcp open  http
| http-sitemap-generator: 
|   Directory structure:
|     /
|       Other: 1; php: 1
|     /dvwa/css/
|       css: 1
|     /dvwa/images/
|       png: 2
|   Longest directory structure:
|     Depth: 2
|     Dir: /dvwa/images/
|   Total files found (by extension):
|_    Other: 1; css: 1; php: 1; png: 2
MAC Address: 02:42:C0:A8:7A:02 (Unknown)

Nmap done: 1 IP address (1 host up) scanned in 1.74 seconds

nmap -sT -sV -p 0-65535 -Pn 192.168.122.2
Starting Nmap 7.92 ( https://nmap.org ) at 2023-06-01 07:16 UTC
Nmap scan report for 192.168.122.2
Host is up (0.0011s latency).
Not shown: 65535 closed tcp ports (conn-refused)
PORT   STATE SERVICE VERSION
80/tcp open  http    Apache httpd 2.4.25 ((Debian))

Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 11.73 seconds