InfoSec LAB

Jacko_Web_80

Created: 3 min read

Web

Nmap discovered a Web server on the target port 80 The running service is Microsoft IIS httpd 10.0

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/jacko]
└─$ curl -I -X OPTIONS http://$IP/            
HTTP/1.1 200 OK
Allow: OPTIONS, TRACE, GET, HEAD, POST
Server: Microsoft-IIS/10.0
Public: OPTIONS, TRACE, GET, HEAD, POST
Date: Sat, 22 Mar 2025 19:15:56 GMT
Content-Length: 0
 
┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/jacko]
└─$ curl -I http://$IP/      
HTTP/1.1 200 OK
Content-Length: 1595
Content-Type: text/html
Last-Modified: Wed, 13 Mar 2019 13:36:26 GMT
Accept-Ranges: bytes
ETag: "0e980c1a1d9d41:0"
Server: Microsoft-IIS/10.0
Date: Sat, 22 Mar 2025 19:16:05 GMT

Redirected to the H2 default installation page at /html/main.html

Fuzzing

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/jacko]
└─$ ffuf -c -w /usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-lowercase-2.3-medium.txt -recursion -u http://$IP/FUZZ -ic
________________________________________________
 :: Method           : GET
 :: URL              : http://192.168.236.66/FUZZ
 :: Wordlist         : FUZZ: /usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-lowercase-2.3-medium.txt
 :: Follow redirects : false
 :: Calibration      : false
 :: Timeout          : 10
 :: Threads          : 40
 :: Matcher          : Response status: 200-299,301,302,307,401,403,405,500
________________________________________________
                        [Status: 200, Size: 1595, Words: 142, Lines: 45, Duration: 28ms]
images                  [Status: 301, Size: 152, Words: 9, Lines: 2, Duration: 26ms]
[INFO] Adding a new job to the queue: http://192.168.236.66/images/FUZZ
 
help                    [Status: 301, Size: 150, Words: 9, Lines: 2, Duration: 20ms]
[INFO] Adding a new job to the queue: http://192.168.236.66/help/FUZZ
 
html                    [Status: 301, Size: 150, Words: 9, Lines: 2, Duration: 20ms]
[INFO] Adding a new job to the queue: http://192.168.236.66/html/FUZZ
 
text                    [Status: 301, Size: 150, Words: 9, Lines: 2, Duration: 18ms]
[INFO] Adding a new job to the queue: http://192.168.236.66/text/FUZZ
 
javadoc                 [Status: 301, Size: 153, Words: 9, Lines: 2, Duration: 21ms]
[INFO] Adding a new job to the queue: http://192.168.236.66/javadoc/FUZZ
 
                        [Status: 200, Size: 1595, Words: 142, Lines: 45, Duration: 20ms]
[INFO] Starting queued job on target: http://192.168.236.66/images/FUZZ
 
                        [Status: 403, Size: 1233, Words: 73, Lines: 30, Duration: 18ms]
                        [Status: 403, Size: 1233, Words: 73, Lines: 30, Duration: 26ms]
[INFO] Starting queued job on target: http://192.168.236.66/help/FUZZ
 
                        [Status: 403, Size: 1233, Words: 73, Lines: 30, Duration: 21ms]
                        [Status: 403, Size: 1233, Words: 73, Lines: 30, Duration: 18ms]
[INFO] Starting queued job on target: http://192.168.236.66/html/FUZZ
 
                        [Status: 403, Size: 1233, Words: 73, Lines: 30, Duration: 26ms]
images                  [Status: 301, Size: 157, Words: 9, Lines: 2, Duration: 26ms]
[INFO] Adding a new job to the queue: http://192.168.236.66/html/images/FUZZ
 
                        [Status: 403, Size: 1233, Words: 73, Lines: 30, Duration: 19ms]
[INFO] Starting queued job on target: http://192.168.236.66/text/FUZZ
 
                        [Status: 403, Size: 1233, Words: 73, Lines: 30, Duration: 19ms]
                        [Status: 403, Size: 1233, Words: 73, Lines: 30, Duration: 21ms]
[INFO] Starting queued job on target: http://192.168.236.66/javadoc/FUZZ
 
                        [Status: 200, Size: 862, Words: 84, Lines: 25, Duration: 20ms]
                        [Status: 200, Size: 862, Words: 84, Lines: 25, Duration: 21ms]
[INFO] Starting queued job on target: http://192.168.236.66/html/images/FUZZ
 
                        [Status: 403, Size: 1233, Words: 73, Lines: 30, Duration: 21ms]
                        [Status: 403, Size: 1233, Words: 73, Lines: 30, Duration: 18ms]
:: Progress: [207630/207630] :: Job [7/7] :: 2000 req/sec :: Duration: [0:01:50] :: Errors: 0 ::

N/A

Interactive Graph View

Backlinks