Web
Nmap discovered a web server running on the target port 8080
Webroot
I am greeted with a Basic HTTP authentication
I obviously, do not have any credential, and I tried both weak and default credentials
Fuzzing
┌──(kali㉿kali)-[~/archive/htb/labs/omni]
└─$ ffuf -c -w /usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-2.3-medium.txt -u http://$IP:8080/FUZZ -ic -e .txt,.php,.html -fc 401
________________________________________________
:: Method : GET
:: URL : http://10.10.10.204:8080/FUZZ
:: Wordlist : FUZZ: /usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-2.3-medium.txt
:: Extensions : .txt .php .html
:: Follow redirects : false
:: Calibration : false
:: Timeout : 10
:: Threads : 40
:: Matcher : Response status: 200,204,301,302,307,401,403,405,500
:: Filter : Response status: 401
________________________________________________
:: Progress: [882188/882188] :: Job [1/1] :: 1308 req/sec :: Duration: [0:11:25] :: Errors: 0 ::I tried fuzzing the web server, but nothing returns