Sorcerer_Web_8080

Web

---

Nmap discovered a Web server on the target port 8080 The running service is Apache Tomcat 7.0.4

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/sorcerer]
└─$ curl -I -X OPTIONS http://$IP:8080/
HTTP/1.1 200 
Allow: GET, HEAD, POST, OPTIONS
Content-Length: 0
Date: Fri, 28 Mar 2025 19:20:06 GMT
 
 
┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/sorcerer]
└─$ curl -I http://$IP:8080/           
HTTP/1.1 200 
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Date: Fri, 28 Mar 2025 19:20:08 GMT

Tomcat The version is 7.0.4

Manager

---

It would appear that the /manager endpoint is only accessible through localhost

X-Forwarded-For: localhost trick doesn’t appear to work

Vulnerabilities

---

Looking into the vulnerabilities, the target instance suffers from several vulnerabilities. None of the exploits worked.