Quackerjack_Web_80

Web

---

Nmap discovered a Web server on the target port 80 The running service is Apache httpd 2.4.6 ((CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16)

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/quackerJack]
└─$ curl -I   I -X OPTIONS http://$IP/                                                                                  HTTP/1.1 200 OK
Date: Thu, 03 Apr 2025 04:27:51 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16
Allow: POST,OPTIONS,GET,HEAD,TRACE
Content-Length: 0
Content-Type: httpd/unix-directory
 
 
┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/quackerJack]
└─$ curl -I http://$IP/
HTTP/1.1 403 Forbidden
Date: Thu, 03 Apr 2025 04:27:54 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16
Last-Modified: Thu, 16 Oct 2014 13:20:58 GMT
ETag: "1321-5058a1e728280"
Accept-Ranges: bytes
Content-Length: 4897
Content-Type: text/html; charset=UTF-8

Webroot This is a default Apache installation page

Fuzzing

---

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/quackerJack]
└─$ ffuf -c -w /usr/share/wordlists/seclists/Discovery/Web-Content/big.txt -u http://$IP/FUZZ -ic -e .txt,.html,.php -fc 403
________________________________________________
 :: Method           : GET
 :: URL              : http://192.168.144.57/FUZZ
 :: Wordlist         : FUZZ: /usr/share/wordlists/seclists/Discovery/Web-Content/big.txt
 :: Extensions       : .txt .html .php 
 :: Follow redirects : false
 :: Calibration      : false
 :: Timeout          : 10
 :: Threads          : 40
 :: Matcher          : Response status: 200-299,301,302,307,401,403,405,500
 :: Filter           : Response status: 403
________________________________________________
:: Progress: [81912/81912] :: Job [1/1] :: 1923 req/sec :: Duration: [0:00:47] :: Errors: 0 ::
 
 
┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/quackerJack]
└─$ ffuf -c -w /usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-lowercase-2.3-medium.txt -u http://$IP/FUZZ/ -ic
________________________________________________
 :: Method           : GET
 :: URL              : http://192.168.144.57/FUZZ/
 :: Wordlist         : FUZZ: /usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-lowercase-2.3-medium.txt
 :: Follow redirects : false
 :: Calibration      : false
 :: Timeout          : 10
 :: Threads          : 40
 :: Matcher          : Response status: 200-299,301,302,307,401,403,405,500
________________________________________________
                        [Status: 403, Size: 4897, Words: 887, Lines: 121, Duration: 20ms]
cgi-bin                 [Status: 403, Size: 210, Words: 15, Lines: 9, Duration: 23ms]
icons                   [Status: 200, Size: 74409, Words: 7427, Lines: 1007, Duration: 29ms]
:: Progress: [207630/207630] :: Job [1/1] :: 1769 req/sec :: Duration: [0:01:54] :: Errors: 0 ::

N/A