Pebbles_Web_3305

Web

---

Nmap discovered a Web server on the target port 3305 The running service is Apache httpd 2.4.18 ((Ubuntu))

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/pebbles]
└─$ curl -I -X OPTIONS http://$IP:3305
HTTP/1.1 200 OK
Date: Tue, 11 Mar 2025 21:34:08 GMT
Server: Apache/2.4.18 (Ubuntu)
Allow: GET,HEAD,POST,OPTIONS
Content-Length: 0
Content-Type: text/html
 
 
┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/pebbles]
└─$ curl -I http://$IP:3305        
HTTP/1.1 200 OK
Date: Tue, 11 Mar 2025 21:34:14 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Mon, 22 Jun 2020 16:53:13 GMT
ETag: "2c39-5a8af141fc0fe"
Accept-Ranges: bytes
Content-Length: 11321
Vary: Accept-Encoding
Content-Type: text/html

It’s the default Apache installation page

Fuzzing

---

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/pebbles]
└─$ ffuf -c -w /usr/share/wordlists/seclists/Discovery/Web-Content/big.txt -u http://$IP:3305/FUZZ -ic
 
        /'___\  /'___\           /'___\       
       /\ \__/ /\ \__/  __  __  /\ \__/       
       \ \ ,__\\ \ ,__\/\ \/\ \ \ \ ,__\      
        \ \ \_/ \ \ \_/\ \ \_\ \ \ \ \_/      
         \ \_\   \ \_\  \ \____/  \ \_\       
          \/_/    \/_/   \/___/    \/_/       
 
       v2.1.0-dev
________________________________________________
 
 :: Method           : GET
 :: URL              : http://192.168.209.52:3305/FUZZ
 :: Wordlist         : FUZZ: /usr/share/wordlists/seclists/Discovery/Web-Content/big.txt
 :: Follow redirects : false
 :: Calibration      : false
 :: Timeout          : 10
 :: Threads          : 40
 :: Matcher          : Response status: 200-299,301,302,307,401,403,405,500
________________________________________________
 
.htpasswd               [Status: 403, Size: 281, Words: 20, Lines: 10, Duration: 30ms]
.htaccess               [Status: 403, Size: 281, Words: 20, Lines: 10, Duration: 30ms]
cgi-bin/                [Status: 403, Size: 281, Words: 20, Lines: 10, Duration: 22ms]
javascript              [Status: 301, Size: 328, Words: 20, Lines: 10, Duration: 21ms]
server-status           [Status: 403, Size: 281, Words: 20, Lines: 10, Duration: 21ms]
zm                      [Status: 301, Size: 320, Words: 20, Lines: 10, Duration: 19ms]
:: Progress: [20478/20478] :: Job [1/1] :: 250 req/sec :: Duration: [0:00:23] :: Errors: 0 ::

zm

zm

---

There is a ZoneMinder instance running at the /zm/ endpoint