Web


Nmap discovered a Web server running on the target port 80 The running service is Apache httpd 2.4.37 ((centos))

Webroot It’s a default Apache HTTP server installation page

Fuzzing


┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/hetemit]
└─$ ffuf -c -w /usr/share/wordlists/seclists/Discovery/Web-Content/big.txt -u http://$IP/FUZZ -ic
________________________________________________
 :: Method           : GET
 :: URL              : http://192.168.218.117/FUZZ
 :: Wordlist         : FUZZ: /usr/share/wordlists/seclists/Discovery/Web-Content/big.txt
 :: Follow redirects : false
 :: Calibration      : false
 :: Timeout          : 10
 :: Threads          : 40
 :: Matcher          : Response status: 200-299,301,302,307,401,403,405,500
________________________________________________
.htaccess               [Status: 403, Size: 218, Words: 16, Lines: 10, Duration: 23ms]
.htpasswd               [Status: 403, Size: 218, Words: 16, Lines: 10, Duration: 24ms]
cgi-bin/                [Status: 403, Size: 217, Words: 16, Lines: 10, Duration: 22ms]
noindex                 [Status: 301, Size: 239, Words: 14, Lines: 8, Duration: 26ms]
:: Progress: [20478/20478] :: Job [1/1] :: 1587 req/sec :: Duration: [0:00:13] :: Errors: 0 ::

noindex

/noindex


N/A