twenty.worker.htb
Webroot of the twenty.worker.htb virtual host / sub-domain
It was initially enumerated from fuzzing, but was NOT listed in the work section of the dimension.worker.htb virtual host / sub-domain
It was therefore suspected NOT to be a demo website template as a “work”, but it seems to be just another demo website
A few endpoints are picked up by the Burp Suite’s passive crawler
Content appear to be dummy ipsum for a demo website
left-sidebar.html
Content appear to be dummy ipsum for a demo website
right-sidebar.html
Content appear to be dummy ipsum for a demo website
no-sidebar.html
Content appear to be dummy ipsum for a demo website
contact.html
The contact.html file contains a submission form that doesn’t seem operational
Fuzzing
┌──(kali㉿kali)-[~/archive/htb/labs/worker]
└─$ ffuf -c -w /usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-2.3-medium.txt -u http://twenty.worker.htb/FUZZ -ic -e .html,.txt
________________________________________________
:: Method : GET
:: URL : http://twenty.worker.htb/FUZZ
:: Wordlist : FUZZ: /usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-2.3-medium.txt
:: Extensions : .html .txt
:: Follow redirects : false
:: Calibration : false
:: Timeout : 10
:: Threads : 40
:: Matcher : Response status: 200-299,301,302,307,401,403,405,500
________________________________________________
[Status: 200, Size: 10134, Words: 641, Lines: 275, Duration: 105ms]
contact.html [Status: 200, Size: 4171, Words: 185, Lines: 120, Duration: 198ms]
images [Status: 301, Size: 155, Words: 9, Lines: 2, Duration: 292ms]
index.html [Status: 200, Size: 10134, Words: 641, Lines: 275, Duration: 292ms]
assets [Status: 301, Size: 155, Words: 9, Lines: 2, Duration: 105ms]
license.txt [Status: 200, Size: 17128, Words: 2798, Lines: 64, Duration: 109ms]
readme.txt [Status: 200, Size: 1407, Words: 172, Lines: 42, Duration: 101ms]
:: Progress: [661641/661641] :: Job [1/1] :: 2 req/sec :: Duration: [0:43:56] :: Errors: 740 ::No additional endpoint discovered