Hokkaido_Web_80

Web

---

Nmap discovered a Web server on the target port 80 The running service is Microsoft IIS httpd 10.0

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/hokkaido]
└─$ curl -I -X OPTIONS http://dc.hokkaido-aerospace.com/                 
HTTP/1.1 200 OK
Allow: OPTIONS, TRACE, GET, HEAD, POST
Server: Microsoft-IIS/10.0
Public: OPTIONS, TRACE, GET, HEAD, POST
X-Powered-By: ASP.NET
Date: Fri, 25 Apr 2025 12:06:07 GMT
Content-Length: 0
 
 
┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/hokkaido]
└─$ curl -I http://dc.hokkaido-aerospace.com/        
HTTP/1.1 200 OK
Content-Length: 703
Content-Type: text/html
Last-Modified: Sat, 25 Nov 2023 13:01:01 GMT
Accept-Ranges: bytes
ETag: "37dc3719f1fda1:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Fri, 25 Apr 2025 12:06:10 GMT

Webroot It’s a default IIS installation page

Fuzzing

---

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/hokkaido]
└─$ ffuf -c -w /usr/share/wordlists/seclists/Discovery/Web-Content/big.txt -u http://dc.hokkaido-aerospace.com/FUZZ -ic -e .html,.txt,.aspx -fc 403
________________________________________________
 :: Method           : GET
 :: URL              : http://dc.hokkaido-aerospace.com/FUZZ
 :: Wordlist         : FUZZ: /usr/share/wordlists/seclists/Discovery/Web-Content/big.txt
 :: Extensions       : .html .txt .aspx 
 :: Follow redirects : false
 :: Calibration      : false
 :: Timeout          : 10
 :: Threads          : 40
 :: Matcher          : Response status: 200-299,301,302,307,401,403,405,500
 :: Filter           : Response status: 403
________________________________________________
aspnet_client           [Status: 301, Size: 170, Words: 9, Lines: 2, Duration: 29ms]
:: Progress: [81912/81912] :: Job [1/1] :: 1282 req/sec :: Duration: [0:01:00] :: Errors: 0 ::
 
 
┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/hokkaido]
└─$ ffuf -c -w /usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-lowercase-2.3-medium.txt -u http://dc.hokkaido-aerospace.com/FUZZ/ -ic -fc 403
________________________________________________
 :: Method           : GET
 :: URL              : http://dc.hokkaido-aerospace.com/FUZZ/
 :: Wordlist         : FUZZ: /usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-lowercase-2.3-medium.txt
 :: Follow redirects : false
 :: Calibration      : false
 :: Timeout          : 10
 :: Threads          : 40
 :: Matcher          : Response status: 200-299,301,302,307,401,403,405,500
 :: Filter           : Response status: 403
________________________________________________
                        [Status: 200, Size: 703, Words: 27, Lines: 32, Duration: 30ms]
:: Progress: [207630/207630] :: Job [1/1] :: 1265 req/sec :: Duration: [0:04:08] :: Errors: 80 ::

N/A

Virtual Host / Sub-domain Discovery

---

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/hokkaido]
└─$ ffuf -c -w /usr/share/wordlists/seclists/Discovery/DNS/subdomains-top1million-110000.txt -u http://$IP/ -H 'Host: FUZZ.hokkaido-aerospace.com' -ic -mc all -fs 703
________________________________________________
 :: Method           : GET
 :: URL              : http://192.168.119.40/
 :: Wordlist         : FUZZ: /usr/share/wordlists/seclists/Discovery/DNS/subdomains-top1million-110000.txt
 :: Header           : Host: FUZZ.hokkaido-aerospace.com
 :: Follow redirects : false
 :: Calibration      : false
 :: Timeout          : 10
 :: Threads          : 40
 :: Matcher          : Response status: all
 :: Filter           : Response size: 703
________________________________________________
:: Progress: [114437/114437] :: Job [1/1] :: 1574 req/sec :: Duration: [0:01:18] :: Errors: 0 ::

N/A