Internal_OffSec_Web_5357

Web

---

Nmap discovered a Web server on the target port 5357 The running service is Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/internal_offsec]
└─$ curl -I -X OPTIONS http://$IP:5357/
HTTP/1.1 503 Service Unavailable
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Fri, 07 Mar 2025 19:57:20 GMT
Connection: close
Content-Length: 326

503

Fuzzing

---

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/internal_offsec]
└─$ ffuf -c -w /usr/share/wordlists/seclists/Discovery/Web-Content/big.txt -u http://$IP:5357/FUZZ -ic
________________________________________________
 :: Method           : GET
 :: URL              : http://192.168.136.40:5357/FUZZ
 :: Wordlist         : FUZZ: /usr/share/wordlists/seclists/Discovery/Web-Content/big.txt
 :: Follow redirects : false
 :: Calibration      : false
 :: Timeout          : 10
 :: Threads          : 40
 :: Matcher          : Response status: 200-299,301,302,307,401,403,405,500
________________________________________________
:: Progress: [20478/20478] :: Job [1/1] :: 781 req/sec :: Duration: [0:00:26] :: Errors: 0 ::
 
┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/internal_offsec]
└─$ ffuf -c -w /usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-lowercase-2.3-medium.txt -u http://$IP:5357/FUZZ/ -ic
________________________________________________
 :: Method           : GET
 :: URL              : http://192.168.136.40:5357/FUZZ/
 :: Wordlist         : FUZZ: /usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-lowercase-2.3-medium.txt
 :: Follow redirects : false
 :: Calibration      : false
 :: Timeout          : 10
 :: Threads          : 40
 :: Matcher          : Response status: 200-299,301,302,307,401,403,405,500
________________________________________________
:: Progress: [207630/207630] :: Job [1/1] :: 716 req/sec :: Duration: [0:06:17] :: Errors: 210 ::

N/A