Hepet_Web_8000

Web

---

Nmap discovered a Web server on the target port 8000 The running service is Apache httpd 2.4.46 ((Win64) OpenSSL/1.1.1g PHP/7.3.23)

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/hepet]
└─$ curl -I -k http://$IP:8000/ 
HTTP/1.1 200 OK
Date: Tue, 04 Mar 2025 13:28:15 GMT
Server: Apache/2.4.46 (Win64) OpenSSL/1.1.1g PHP/7.3.23
Last-Modified: Tue, 20 Oct 2020 20:34:20 GMT
ETag: "32e8-5b22027cd0b00"
Accept-Ranges: bytes
Content-Length: 13032
Content-Type: text/html

Webroot The application appears identical to the web application on the target port 443 They seems to be mirrored to one another

Fuzzing

---

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/hepet]
└─$ ffuf -c -w /usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-2.3-medium.txt -u http://$IP:8000/FUZZ/ -ic -fc 403
________________________________________________
 :: Method           : GET
 :: URL              : http://192.168.159.140:8000/FUZZ/
 :: Wordlist         : FUZZ: /usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-2.3-medium.txt
 :: Follow redirects : false
 :: Calibration      : false
 :: Timeout          : 10
 :: Threads          : 40
 :: Matcher          : Response status: 200-299,301,302,307,401,403,405,500
 :: Filter           : Response status: 403
________________________________________________
                        [Status: 200, Size: 13032, Words: 2587, Lines: 342, Duration: 24ms]
icons                   [Status: 200, Size: 74798, Words: 7383, Lines: 1005, Duration: 46ms]
team                    [Status: 200, Size: 2062, Words: 183, Lines: 22, Duration: 22ms]
fonts                   [Status: 200, Size: 2859, Words: 194, Lines: 25, Duration: 23ms]
Fonts                   [Status: 200, Size: 2859, Words: 194, Lines: 25, Duration: 24ms]
Team                    [Status: 200, Size: 2062, Words: 183, Lines: 22, Duration: 21ms]
:: Progress: [220546/220546] :: Job [1/1] :: 2000 req/sec :: Duration: [0:01:58] :: Errors: 0 ::

N/A