Amaterasu_Web_40080

Web

---

Nmap discovered a Web server on the target port 40080 The running service is Apache httpd 2.4.53 ((Fedora))

┌──(kali㉿kali)-[~/PEN-200/PG_PLAY/amaterasu]
└─$ curl -I -X OPTIONS http://$IP:40080/
HTTP/1.1 200 OK
Date: Sun, 27 Apr 2025 12:02:15 GMT
Server: Apache/2.4.53 (Fedora)
Allow: POST,OPTIONS,HEAD,GET,TRACE
Content-Length: 0
Content-Type: text/html; charset=UTF-8
 
 
┌──(kali㉿kali)-[~/PEN-200/PG_PLAY/amaterasu]
└─$ curl -I http://$IP:40080/        
HTTP/1.1 200 OK
Date: Sun, 27 Apr 2025 12:02:17 GMT
Server: Apache/2.4.53 (Fedora)
Last-Modified: Tue, 28 Mar 2023 07:19:03 GMT
ETag: "444-5f7f0ac9afaad"
Accept-Ranges: bytes
Content-Length: 1092
Content-Type: text/html; charset=UTF-8

Webroot

Fuzzing

---

┌──(kali㉿kali)-[~/PEN-200/PG_PLAY/amaterasu]
└─$ ffuf -c -w /usr/share/wordlists/seclists/Discovery/Web-Content/big.txt -u http://$IP:40080/FUZZ -ic -e .html,.txt,.php -fc 403
________________________________________________
 :: Method           : GET
 :: URL              : http://192.168.120.249:40080/FUZZ
 :: Wordlist         : FUZZ: /usr/share/wordlists/seclists/Discovery/Web-Content/big.txt
 :: Extensions       : .html .txt .php 
 :: Follow redirects : false
 :: Calibration      : false
 :: Timeout          : 10
 :: Threads          : 40
 :: Matcher          : Response status: 200-299,301,302,307,401,403,405,500
 :: Filter           : Response status: 403
________________________________________________
LICENSE                 [Status: 200, Size: 6555, Words: 965, Lines: 117, Duration: 25ms]
images                  [Status: 301, Size: 244, Words: 14, Lines: 8, Duration: 24ms]
index.html              [Status: 200, Size: 1092, Words: 168, Lines: 26, Duration: 24ms]
styles                  [Status: 301, Size: 244, Words: 14, Lines: 8, Duration: 26ms]
:: Progress: [81912/81912] :: Job [1/1] :: 1470 req/sec :: Duration: [0:00:54] :: Errors: 0 ::
 
 
 
┌──(kali㉿kali)-[~/PEN-200/PG_PLAY/amaterasu]
└─$ ffuf -c -w /usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-lowercase-2.3-medium.txt -u http://$IP:40080/FUZZ/ -ic -fc 403
________________________________________________
 :: Method           : GET
 :: URL              : http://192.168.120.249:40080/FUZZ/
 :: Wordlist         : FUZZ: /usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-lowercase-2.3-medium.txt
 :: Follow redirects : false
 :: Calibration      : false
 :: Timeout          : 10
 :: Threads          : 40
 :: Matcher          : Response status: 200-299,301,302,307,401,403,405,500
 :: Filter           : Response status: 403
________________________________________________
                        [Status: 200, Size: 1092, Words: 168, Lines: 26, Duration: 29ms]
images                  [Status: 200, Size: 894, Words: 70, Lines: 16, Duration: 26ms]
icons                   [Status: 200, Size: 74416, Words: 7420, Lines: 1007, Duration: 31ms]
styles                  [Status: 200, Size: 885, Words: 77, Lines: 16, Duration: 24ms]
:: Progress: [207630/207630] :: Job [1/1] :: 1538 req/sec :: Duration: [0:02:19] :: Errors: 0 ::

N/A