InfoSec LAB

Nukem_Web_13000

Created: 4 min read

Web

Nmap discovered a Web server on the target port 13000 The running service is nginx 1.18.0

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/nukem]
└─$ curl -I -X OPTIONS http://$IP:13000/
HTTP/1.1 405 Not Allowed
Server: nginx/1.18.0
Date: Mon, 10 Mar 2025 14:16:07 GMT
Content-Type: text/html
Content-Length: 157
Connection: keep-alive
 
┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/nukem]
└─$ curl -I http://$IP:13000/        
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Mon, 10 Mar 2025 14:16:13 GMT
Content-Type: text/html
Content-Length: 5057
Last-Modified: Mon, 18 Dec 2017 09:21:20 GMT
Connection: keep-alive
ETag: "5a378890-13c1"
Accept-Ranges: bytes

Webroot It’s a login page No credential is known at this time

Fuzzing

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/nukem]
└─$ ffuf -c -w /usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-lowercase-2.3-medium.txt -recursion -u http://$IP:13000/FUZZ -ic
________________________________________________
 :: Method           : GET
 :: URL              : http://192.168.113.105:13000/FUZZ
 :: Wordlist         : FUZZ: /usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-lowercase-2.3-medium.txt
 :: Follow redirects : false
 :: Calibration      : false
 :: Timeout          : 10
 :: Threads          : 40
 :: Matcher          : Response status: 200-299,301,302,307,401,403,405,500
________________________________________________
                        [Status: 200, Size: 5057, Words: 114, Lines: 106, Duration: 31ms]
images                  [Status: 301, Size: 169, Words: 5, Lines: 8, Duration: 29ms]
[INFO] Adding a new job to the queue: http://192.168.113.105:13000/images/FUZZ
 
css                     [Status: 301, Size: 169, Words: 5, Lines: 8, Duration: 27ms]
[INFO] Adding a new job to the queue: http://192.168.113.105:13000/css/FUZZ
 
js                      [Status: 301, Size: 169, Words: 5, Lines: 8, Duration: 28ms]
[INFO] Adding a new job to the queue: http://192.168.113.105:13000/js/FUZZ
 
vendor                  [Status: 301, Size: 169, Words: 5, Lines: 8, Duration: 26ms]
[INFO] Adding a new job to the queue: http://192.168.113.105:13000/vendor/FUZZ
 
fonts                   [Status: 301, Size: 169, Words: 5, Lines: 8, Duration: 28ms]
[INFO] Adding a new job to the queue: http://192.168.113.105:13000/fonts/FUZZ
 
                        [Status: 200, Size: 5057, Words: 114, Lines: 106, Duration: 28ms]
[INFO] Starting queued job on target: http://192.168.113.105:13000/images/FUZZ
 
                        [Status: 403, Size: 153, Words: 3, Lines: 8, Duration: 28ms]
icons                   [Status: 301, Size: 169, Words: 5, Lines: 8, Duration: 29ms]
[INFO] Adding a new job to the queue: http://192.168.113.105:13000/images/icons/FUZZ
 
                        [Status: 403, Size: 153, Words: 3, Lines: 8, Duration: 30ms]
[INFO] Starting queued job on target: http://192.168.113.105:13000/css/FUZZ
 
                        [Status: 403, Size: 153, Words: 3, Lines: 8, Duration: 28ms]
                        [Status: 403, Size: 153, Words: 3, Lines: 8, Duration: 29ms]
[INFO] Starting queued job on target: http://192.168.113.105:13000/js/FUZZ
 
                        [Status: 403, Size: 153, Words: 3, Lines: 8, Duration: 30ms]
                        [Status: 403, Size: 153, Words: 3, Lines: 8, Duration: 42ms]
[INFO] Starting queued job on target: http://192.168.113.105:13000/vendor/FUZZ
 
                        [Status: 403, Size: 153, Words: 3, Lines: 8, Duration: 26ms]
bootstrap               [Status: 301, Size: 169, Words: 5, Lines: 8, Duration: 43ms]
[INFO] Adding a new job to the queue: http://192.168.113.105:13000/vendor/bootstrap/FUZZ
 
                        [Status: 403, Size: 153, Words: 3, Lines: 8, Duration: 28ms]
jquery                  [Status: 301, Size: 169, Words: 5, Lines: 8, Duration: 30ms]
[INFO] Adding a new job to the queue: http://192.168.113.105:13000/vendor/jquery/FUZZ
 
animate                 [Status: 301, Size: 169, Words: 5, Lines: 8, Duration: 27ms]
[INFO] Adding a new job to the queue: http://192.168.113.105:13000/vendor/animate/FUZZ
 
[INFO] Starting queued job on target: http://192.168.113.105:13000/fonts/FUZZ
 
                        [Status: 403, Size: 153, Words: 3, Lines: 8, Duration: 24ms]
ubuntu                  [Status: 301, Size: 169, Words: 5, Lines: 8, Duration: 35ms]
[INFO] Adding a new job to the queue: http://192.168.113.105:13000/fonts/ubuntu/FUZZ
 
                        [Status: 403, Size: 153, Words: 3, Lines: 8, Duration: 31ms]
[INFO] Starting queued job on target: http://192.168.113.105:13000/images/icons/FUZZ
 
                        [Status: 403, Size: 153, Words: 3, Lines: 8, Duration: 30ms]
                        [Status: 403, Size: 153, Words: 3, Lines: 8, Duration: 34ms]
[INFO] Starting queued job on target: http://192.168.113.105:13000/vendor/bootstrap/FUZZ
 
                        [Status: 403, Size: 153, Words: 3, Lines: 8, Duration: 32ms]
css                     [Status: 301, Size: 169, Words: 5, Lines: 8, Duration: 36ms]
[INFO] Adding a new job to the queue: http://192.168.113.105:13000/vendor/bootstrap/css/FUZZ
 
js                      [Status: 301, Size: 169, Words: 5, Lines: 8, Duration: 35ms]
[INFO] Adding a new job to the queue: http://192.168.113.105:13000/vendor/bootstrap/js/FUZZ
 
                        [Status: 403, Size: 153, Words: 3, Lines: 8, Duration: 27ms]
[INFO] Starting queued job on target: http://192.168.113.105:13000/vendor/jquery/FUZZ
 
                        [Status: 403, Size: 153, Words: 3, Lines: 8, Duration: 29ms]
                        [Status: 403, Size: 153, Words: 3, Lines: 8, Duration: 29ms]
[INFO] Starting queued job on target: http://192.168.113.105:13000/vendor/animate/FUZZ
 
                        [Status: 403, Size: 153, Words: 3, Lines: 8, Duration: 25ms]
                        [Status: 403, Size: 153, Words: 3, Lines: 8, Duration: 25ms]
[INFO] Starting queued job on target: http://192.168.113.105:13000/fonts/ubuntu/FUZZ
 
                        [Status: 403, Size: 153, Words: 3, Lines: 8, Duration: 46ms]
                        [Status: 403, Size: 153, Words: 3, Lines: 8, Duration: 24ms]
[INFO] Starting queued job on target: http://192.168.113.105:13000/vendor/bootstrap/css/FUZZ
 
                        [Status: 403, Size: 153, Words: 3, Lines: 8, Duration: 71ms]
                        [Status: 403, Size: 153, Words: 3, Lines: 8, Duration: 26ms]
[INFO] Starting queued job on target: http://192.168.113.105:13000/vendor/bootstrap/js/FUZZ
 
                        [Status: 403, Size: 153, Words: 3, Lines: 8, Duration: 25ms]
                        [Status: 403, Size: 153, Words: 3, Lines: 8, Duration: 24ms]
:: Progress: [207630/207630] :: Job [13/13] :: 1587 req/sec :: Duration: [0:02:24] :: Errors: 0 ::

N/A

Interactive Graph View

Backlinks