Web


Nmap discovered a Web server on the target port 10000 The running service is unidentified

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/peppo]
└─$ curl -I -X OPTIONS http://$IP:10000/
HTTP/1.1 200 OK
Content-Type: text/plain
Date: Sat, 29 Mar 2025 20:05:44 GMT
Connection: keep-alive
Transfer-Encoding: chunked
 
 
┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/peppo]
└─$ curl -I http://$IP:10000/        
HTTP/1.1 200 OK
Content-Type: text/plain
Date: Sat, 29 Mar 2025 20:05:48 GMT
Connection: keep-alive

Fuzzing


┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/peppo]
└─$ ffuf -c -w /usr/share/wordlists/seclists/Discovery/Web-Content/big.txt -u http://$IP:10000/FUZZ -ic -e .txt,.html,.php -fs 12
________________________________________________
 :: Method           : GET
 :: URL              : http://192.168.154.60:10000/FUZZ
 :: Wordlist         : FUZZ: /usr/share/wordlists/seclists/Discovery/Web-Content/big.txt
 :: Extensions       : .txt .html .php 
 :: Follow redirects : false
 :: Calibration      : false
 :: Timeout          : 10
 :: Threads          : 40
 :: Matcher          : Response status: 200-299,301,302,307,401,403,405,500
 :: Filter           : Response size: 12
________________________________________________
:: Progress: [81912/81912] :: Job [1/1] :: 1869 req/sec :: Duration: [0:00:43] :: Errors: 0 ::
 
 
┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/peppo]
└─$ ffuf -c -w /usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-lowercase-2.3-medium.txt -recursion -u http://$IP:10000/FUZZ -ic -fs 12
________________________________________________
 :: Method           : GET
 :: URL              : http://192.168.154.60:10000/FUZZ
 :: Wordlist         : FUZZ: /usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-lowercase-2.3-medium.txt
 :: Follow redirects : false
 :: Calibration      : false
 :: Timeout          : 10
 :: Threads          : 40
 :: Matcher          : Response status: 200-299,301,302,307,401,403,405,500
 :: Filter           : Response size: 12
________________________________________________
:: Progress: [207630/207630] :: Job [1/1] :: 1785 req/sec :: Duration: [0:01:54] :: Errors: 0 ::

N/A