Algernon_Web_80

Web

---

Nmap discovered a Web server on the target port 80 The running service is Microsoft IIS httpd 10.0

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/algernon/ftp]
└─$ curl -I -X OPTIONS http://$IP/     
HTTP/1.1 200 OK
Allow: OPTIONS, TRACE, GET, HEAD, POST
Server: Microsoft-IIS/10.0
Public: OPTIONS, TRACE, GET, HEAD, POST
X-Powered-By: ASP.NET
Date: Sat, 22 Mar 2025 13:24:50 GMT
Content-Length: 0
 
 
┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/algernon/ftp]
└─$ curl -I http://$IP/       
HTTP/1.1 200 OK
Content-Length: 696
Content-Type: text/html
Last-Modified: Thu, 30 Apr 2020 05:29:47 GMT
Accept-Ranges: bytes
ETag: "c692185db01ed61:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Sat, 22 Mar 2025 13:24:56 GMT

It’s the default IIS installation page

Fuzzing

---

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/algernon/ftp]
└─$ ffuf -c -w /usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-lowercase-2.3-medium.txt -recursion -u http://$IP/FUZZ -ic -e .aspx
________________________________________________
 :: Method           : GET
 :: URL              : http://192.168.236.65/FUZZ
 :: Wordlist         : FUZZ: /usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-lowercase-2.3-medium.txt
 :: Extensions       : .aspx 
 :: Follow redirects : false
 :: Calibration      : false
 :: Timeout          : 10
 :: Threads          : 40
 :: Matcher          : Response status: 200-299,301,302,307,401,403,405,500
________________________________________________
                        [Status: 200, Size: 696, Words: 26, Lines: 32, Duration: 22ms]
:: Progress: [415260/415260] :: Job [1/1] :: 1503 req/sec :: Duration: [0:04:40] :: Errors: 0 ::

N/A