solid-statement.worker.htb
Webroot of the
solid-state.worker.htb
virtual host / sub-domain
solid-state.worker.htb
was never found during fuzzing, but it was listed in the work
section of the dimension.worker.htb
virtual host / sub-domain
A few endpoints are picked up by the Burp Suite’s passive crawler
Content appear to be dummy ipsum for a demo website
The GET IN TOUCH section of the
index.html
file contains a non operational POST form
generic.html
Dummy demo page for a website template
elements.html
Dummy demo page for a website template
Fuzzing
┌──(kali㉿kali)-[~/archive/htb/labs/worker]
└─$ ffuf -c -w /usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-2.3-medium.txt -u http://solid-state.worker.htb/FUZZ -ic -e .html,.txt
________________________________________________
:: Method : GET
:: URL : http://solid-state.worker.htb/FUZZ
:: Wordlist : FUZZ: /usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-2.3-medium.txt
:: Extensions : .html .txt
:: Follow redirects : false
:: Calibration : false
:: Timeout : 10
:: Threads : 40
:: Matcher : Response status: 200-299,301,302,307,401,403,405,500
________________________________________________
images [Status: 301, Size: 160, Words: 9, Lines: 2, Duration: 107ms]
[Status: 200, Size: 7853, Words: 514, Lines: 183, Duration: 107ms]
index.html [Status: 200, Size: 7853, Words: 514, Lines: 183, Duration: 195ms]
assets [Status: 301, Size: 160, Words: 9, Lines: 2, Duration: 96ms]
license.txt [Status: 200, Size: 17128, Words: 2798, Lines: 64, Duration: 95ms]
generic.html [Status: 200, Size: 6133, Words: 450, Lines: 137, Duration: 95ms]
elements.html [Status: 200, Size: 19503, Words: 1163, Lines: 417, Duration: 94ms]
readme.txt [Status: 200, Size: 854, Words: 102, Lines: 31, Duration: 95ms]
:: Progress: [661641/661641] :: Job [1/1] :: 332 req/sec :: Duration: [0:27:33] :: Errors: 0 ::
No additional endpoint discovered