Cacti
ffuf has discovered a virtual host / sub-domain; cacti.monitorsthree.htb
The /etc/hosts file on Kali has been updated
Redirected to a login page of a Cacti instance
Cacti is an open-source, web-based network monitoring, performance, fault and configuration management framework designed as a front-end application for the open-source, industry-standard data logging tool RRDtool. Cacti allows a user to poll services at predetermined intervals and graph the resulting data. Through the use of Cacti plugins, it has been extended to encompass all of the FCAPS operational management categories. It is generally used to graph time-series data of metrics such as CPU load and network bandwidth utilization. A common usage is to monitor network traffic by polling a network switch or router interface via Simple Network Management Protocol (SNMP).
The version information has been disclosed
Authentication
Checking for credential reuse with the exfiltrated credential of the admin user
Successfully authenticated to the Cacti platform as the admin user
Vulnerability
Searching exploit online for the Cacti version 1.2.26 revealed an article from Packet Storm about a Remote Code Execution vulnerability