Sorcerer_Web_80

Web

---

Nmap discovered a Web server on the target port 80 The running service is nginx

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/sorcerer]
└─$ curl -I -X OPTIONS http://$IP/     
HTTP/1.1 405 Not Allowed
Server: nginx
Date: Fri, 28 Mar 2025 19:19:21 GMT
Content-Type: text/html
Content-Length: 166
Connection: keep-alive
 
 
┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/sorcerer]
└─$ curl -I http://$IP/        
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 28 Mar 2025 19:19:25 GMT
Content-Type: text/html
Content-Length: 14
Last-Modified: Thu, 24 Sep 2020 19:27:39 GMT
Connection: keep-alive
ETag: "5f6cf32b-e"
Accept-Ranges: bytes

fake 404 because it responded with code 200

Fuzzing

---

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/sorcerer]
└─$ ffuf -c -w /usr/share/wordlists/seclists/Discovery/Web-Content/big.txt -u http://$IP/FUZZ -ic -e .txt,.html,.php
________________________________________________
 :: Method           : GET
 :: URL              : http://192.168.113.100/FUZZ
 :: Wordlist         : FUZZ: /usr/share/wordlists/seclists/Discovery/Web-Content/big.txt
 :: Extensions       : .txt .html .php 
 :: Follow redirects : false
 :: Calibration      : false
 :: Timeout          : 10
 :: Threads          : 40
 :: Matcher          : Response status: 200-299,301,302,307,401,403,405,500
________________________________________________
index.html              [Status: 200, Size: 14, Words: 3, Lines: 2, Duration: 17ms]
:: Progress: [81912/81912] :: Job [1/1] :: 1562 req/sec :: Duration: [0:00:51] :: Errors: 0 ::
 
 
 
┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/sorcerer]
└─$ ffuf -c -w /usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-lowercase-2.3-medium.txt -recursion -u http://$IP/FUZZ -ic 
________________________________________________
 :: Method           : GET
 :: URL              : http://192.168.113.100/FUZZ
 :: Wordlist         : FUZZ: /usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-lowercase-2.3-medium.txt
 :: Follow redirects : false
 :: Calibration      : false
 :: Timeout          : 10
 :: Threads          : 40
 :: Matcher          : Response status: 200-299,301,302,307,401,403,405,500
________________________________________________
                        [Status: 200, Size: 14, Words: 3, Lines: 2, Duration: 19ms]
:: Progress: [207630/207630] :: Job [1/1] :: 2150 req/sec :: Duration: [0:02:12] :: Errors: 0 ::

N/A