Web


Nmap discovered a Web server on the target port 8081 The running service is nginx 1.14.2

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/pelican]
└─$ curl -I -X OPTIONS http://$IP:8081/                                                    
HTTP/1.1 301 Moved Permanently
Server: nginx/1.14.2
Date: Fri, 21 Mar 2025 19:54:30 GMT
Content-Type: text/html
Content-Length: 185
Connection: keep-alive
Location: http://192.168.132.98:8080/exhibitor/v1/ui/index.html
 
┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/pelican]
└─$ curl -I http://$IP:8081/        
HTTP/1.1 301 Moved Permanently
Server: nginx/1.14.2
Date: Fri, 21 Mar 2025 19:54:56 GMT
Content-Type: text/html
Content-Length: 185
Connection: keep-alive
Location: http://192.168.132.98:8080/exhibitor/v1/ui/index.html

301 to the endpoint at /exhibitor/v1/ui/index.html on the web server on the target port 8080

Fuzzing


┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/pelican]
└─$ ffuf -c -w /usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-lowercase-2.3-medium.txt -recursion -u http://$IP:8081/FUZZ -ic -fc 301
________________________________________________
 :: Method           : GET
 :: URL              : http://192.168.132.98:8081/FUZZ
 :: Wordlist         : FUZZ: /usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-lowercase-2.3-medium.txt
 :: Follow redirects : false
 :: Calibration      : false
 :: Timeout          : 10
 :: Threads          : 40
 :: Matcher          : Response status: 200-299,301,302,307,401,403,405,500
 :: Filter           : Response status: 301
________________________________________________
:: Progress: [207630/207630] :: Job [1/1] :: 1923 req/sec :: Duration: [0:01:52] :: Errors: 0 ::

N/A