Nickel_Web_8089

Web

---

Nmap discovered a Web server on the target port 8089 The running service is Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/nickel]
└─$ curl -i http://$IP:8089
HTTP/1.1 200 OK
Content-Length: 471
Server: Microsoft-HTTPAPI/2.0
Date: Wed, 05 Mar 2025 17:55:53 GMT
 
<h1>DevOps Dashboard</h1>
<hr>
<form action='http://169.254.127.78:33333/list-current-deployments' method='GET'>
<input type='submit' value='List Current Deployments'>
</form>
<br>
<form action='http://169.254.127.78:33333/list-running-procs' method='GET'>
<input type='submit' value='List Running Processes'>
</form>
<br>
<form action='http://169.254.127.78:33333/list-active-nodes' method='GET'>
<input type='submit' value='List Active Nodes'>
</form>
<hr>                            

Webroot There are 3 features that send GET request to endpoints on another network on the port 33333 There is also a web application running on the target port 33333

Fuzzing

---

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/nickel]
└─$ ffuf -c -w /usr/share/wordlists/seclists/Discovery/Web-Content/big.txt -u http://$IP:8089/FUZZ -ic -fs 9
________________________________________________
 :: Method           : GET
 :: URL              : http://192.168.219.99:8089/FUZZ
 :: Wordlist         : FUZZ: /usr/share/wordlists/seclists/Discovery/Web-Content/big.txt
 :: Follow redirects : false
 :: Calibration      : false
 :: Timeout          : 10
 :: Threads          : 40
 :: Matcher          : Response status: 200-299,301,302,307,401,403,405,500
 :: Filter           : Response size: 9
________________________________________________
:: Progress: [20478/20478] :: Job [1/1] :: 1626 req/sec :: Duration: [0:00:13] :: Errors: 0 ::
 
┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/nickel]
└─$ ffuf -c -w /usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-lowercase-2.3-medium.txt -u http://$IP:8089/FUZZ/ -ic -fs 9
________________________________________________
 :: Method           : GET
 :: URL              : http://192.168.219.99:8089/FUZZ/
 :: Wordlist         : FUZZ: /usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-lowercase-2.3-medium.txt
 :: Follow redirects : false
 :: Calibration      : false
 :: Timeout          : 10
 :: Threads          : 40
 :: Matcher          : Response status: 200-299,301,302,307,401,403,405,500
 :: Filter           : Response size: 9
________________________________________________
:: Progress: [207630/207630] :: Job [1/1] :: 1639 req/sec :: Duration: [0:02:25] :: Errors: 0 ::

N/A