Web
Nmap discovered a Web service on the target port 5000
The running service is Apache httpd 2.4.46 (OpenSSL/1.1.1j PHP/7.3.27)
Webroot returns 403
Fuzzing
┌──(kali㉿kali)-[~/archive/htb/labs/love]
└─$ ffuf -c -w /usr/share/wordlists/seclists/Discovery/Web-Content/big.txt -u http://$IP:5000/FUZZ -ic
________________________________________________
:: Method : GET
:: URL : http://10.10.10.239:5000/FUZZ
:: Wordlist : FUZZ: /usr/share/wordlists/seclists/Discovery/Web-Content/big.txt
:: Follow redirects : false
:: Calibration : false
:: Timeout : 10
:: Threads : 40
:: Matcher : Response status: 200,204,301,302,307,401,403,405,500
________________________________________________
[WARN] Caught keyboard interrupt (Ctrl-C)ffuf hangs
staging.love.htb
Webroot returns 403
Fuzzing
┌──(kali㉿kali)-[~/archive/htb/labs/love]
└─$ ffuf -c -w /usr/share/wordlists/seclists/Discovery/Web-Content/big.txt -u http://staging.love.htb:5000/FUZZ -ic
________________________________________________
:: Method : GET
:: URL : http://staging.love.htb:5000/FUZZ
:: Wordlist : FUZZ: /usr/share/wordlists/seclists/Discovery/Web-Content/big.txt
:: Follow redirects : false
:: Calibration : false
:: Timeout : 10
:: Threads : 40
:: Matcher : Response status: 200,204,301,302,307,401,403,405,500
________________________________________________
[WARN] Caught keyboard interrupt (Ctrl-C)ffuf hangs