Web
Nmap discovered a Web server on the target port 80
The running service is nginx 1.16.1
┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/twiggy]
└─$ curl -I http://$IP/
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Mon, 10 Mar 2025 22:03:42 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 6927
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Vary: Cookie/Practice/Twiggy/2-Enumeration/attachments/{6F32DB94-53B4-4BFE-9546-985CBD7A9DBA}.png)
Webroot
It’s Mezzanine CMS
Admin Page
/Practice/Twiggy/2-Enumeration/attachments/{32D0B9E2-CCB8-4E0F-A38D-9675E1041C08}.png)
The admin page is available at /admin/
No credential is known at this time
N/A