teams.onlyrands.com
A sub-domain has been identified; teams.onlyrands.com
┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/scrutiny]
└─$ curl -I -X OPTIONS http://teams.onlyrands.com/
HTTP/1.1 401
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 07 Apr 2025 18:24:52 GMT
Content-Type: text/plain;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
TeamCity-Node-Id: MAIN_SERVER
WWW-Authenticate: Basic realm="TeamCity"
WWW-Authenticate: Bearer realm="TeamCity"
Cache-Control: no-store
┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/scrutiny]
└─$ curl -I http://teams.onlyrands.com/
HTTP/1.1 401
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 07 Apr 2025 18:24:58 GMT
Content-Type: text/plain;charset=UTF-8
Content-Length: 66
Connection: keep-alive
TeamCity-Node-Id: MAIN_SERVER
WWW-Authenticate: Basic realm="TeamCity"
WWW-Authenticate: Bearer realm="TeamCity"
Cache-Control: no-store/Practice/Scrutiny/2-Enumeration/attachments/{DB5C2FFA-79D3-48D0-8C27-4F2EC32EF80D}.png)
Webroot
Redirected to a login page for a TeamCity instance
/Practice/Scrutiny/2-Enumeration/attachments/Pasted-image-20250407205003.png)
TeamCity is a build management and continuous integration server from JetBrains. It was first released on October 2, 2006, and is commercial software and licensed under a proprietary license: a freemium license for up to 100 build configurations and three free Build Agent licenses are available. open-source projects may request a free license.
Version Information
/Practice/Scrutiny/2-Enumeration/attachments/{CA56DD1B-33B0-433C-8D59-50825756B9B8}.png)
The version information is disclosed at the bottom; 2023.05.4 (build 129421)
Vulnerabilities
/Practice/Scrutiny/2-Enumeration/attachments/{6DC38BD3-7F7F-4162-8063-02147B883C4E}.png)
Looking it up online for vulnerabilities reveals an article that points out 2 vulnerabilities;