Web


Nmap discovered a web server running on the target port 64999

Webroot

It says that I’ve been banned.

Fuzzing


┌──(kali㉿kali)-[~/archive/htb/labs/jarvis]
└─$ ffuf -c -w /usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-2.3-medium.txt -u http://supersecurehotel.htb:64999/FUZZ -ic -e .txt,.php,.html
________________________________________________
 
 :: Method           : GET
 :: URL              : http://supersecurehotel.htb:64999/FUZZ
 :: Wordlist         : FUZZ: /usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-2.3-medium.txt
 :: Extensions       : .txt .php .html 
 :: Follow redirects : false
 :: Calibration      : false
 :: Timeout          : 10
 :: Threads          : 40
 :: Matcher          : Response status: 200,204,301,302,307,401,403,405,500
________________________________________________
index.html              [Status: 200, Size: 54, Words: 11, Lines: 2, Duration: 2539ms]
:: Progress: [882188/882188] :: Job [1/1] :: 1355 req/sec :: Duration: [0:11:07] :: Errors: 0 ::

It’s pretty much empty.