Marketing_Web

Web

---

Nmap discovered a Web server on the target port 80 The running service is Apache httpd 2.4.41 ((Ubuntu))

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/marketing]
└─$ curl -I -X OPTIONS http://$IP/
HTTP/1.1 200 OK
Date: Tue, 01 Apr 2025 14:29:51 GMT
Server: Apache/2.4.41 (Ubuntu)
Allow: GET,POST,OPTIONS,HEAD
Content-Length: 0
Content-Type: text/html
 
 
┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/marketing]
└─$ curl -I http://$IP/        
HTTP/1.1 200 OK
Date: Tue, 01 Apr 2025 14:29:53 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Wed, 13 Jul 2022 13:47:32 GMT
ETag: "476e-5e3b006dc8299"
Accept-Ranges: bytes
Content-Length: 18286
Vary: Accept-Encoding
Content-Type: text/html

Webroot A static website

The /about-us.html page contains possible users

Fuzzing

---

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/marketing]
└─$ ffuf -c -w /usr/share/wordlists/seclists/Discovery/Web-Content/big.txt -u http://$IP/FUZZ -ic -e .txt,.html,.php
________________________________________________
 :: Method           : GET
 :: URL              : http://192.168.211.225/FUZZ
 :: Wordlist         : FUZZ: /usr/share/wordlists/seclists/Discovery/Web-Content/big.txt
 :: Extensions       : .txt .html .php 
 :: Follow redirects : false
 :: Calibration      : false
 :: Timeout          : 10
 :: Threads          : 40
 :: Matcher          : Response status: 200-299,301,302,307,401,403,405,500
________________________________________________
.htaccess.txt           [Status: 403, Size: 280, Words: 20, Lines: 10, Duration: 18ms]
.htaccess               [Status: 403, Size: 280, Words: 20, Lines: 10, Duration: 19ms]
.htpasswd.html          [Status: 403, Size: 280, Words: 20, Lines: 10, Duration: 18ms]
.htpasswd               [Status: 403, Size: 280, Words: 20, Lines: 10, Duration: 20ms]
.htpasswd.php           [Status: 403, Size: 280, Words: 20, Lines: 10, Duration: 20ms]
.htaccess.html          [Status: 403, Size: 280, Words: 20, Lines: 10, Duration: 20ms]
.htpasswd.txt           [Status: 403, Size: 280, Words: 20, Lines: 10, Duration: 21ms]
.htaccess.php           [Status: 403, Size: 280, Words: 20, Lines: 10, Duration: 21ms]
about-us.html           [Status: 200, Size: 20099, Words: 7107, Lines: 470, Duration: 24ms]
assets                  [Status: 301, Size: 319, Words: 20, Lines: 10, Duration: 19ms]
contact-us.html         [Status: 200, Size: 10783, Words: 3268, Lines: 278, Duration: 20ms]
index.html              [Status: 200, Size: 18286, Words: 5946, Lines: 442, Duration: 21ms]
old                     [Status: 301, Size: 316, Words: 20, Lines: 10, Duration: 22ms]
server-status           [Status: 403, Size: 280, Words: 20, Lines: 10, Duration: 21ms]
vendor                  [Status: 301, Size: 319, Words: 20, Lines: 10, Duration: 25ms]
:: Progress: [81912/81912] :: Job [1/1] :: 82 req/sec :: Duration: [0:00:56] :: Errors: 0 ::

/old/

/old/ Directory

---

The /old/ directory appears to host an older instance of the website

Virtual Host / Sub-domain

---

There is a button that leads to a virtual host / sub-domain; customers-survey.marketing.pg

The domain information has been appended to the /etc/hosts file on Kali for local DNS resolution