AuthBy_Web_242

Web

---

Nmap discovered a Web server on the target port 242 The running service is Apache httpd 2.2.21 ((Win32) PHP/5.3.8)

Webroot While it uses the basic HTTP authentication, there is an interesting text to the Basic Real in the WWW-Authentication header

Riddle?

Authentication

---

Using the cracked credential of the offsec user

Authenticated I am able to upload files to the web root directory of the FTP server Moving on to Exploitation phase