Wombo_Web_80

Web

---

Nmap discovered a Web server on the target port 80 The running service is nginx 1.10.3

kali@kali:~/PEN-200/PG_PRACTICE/wombo$ curl -I -X OPTIONS http://$IP/                                                   HTTP/1.1 405 Not Allowed
Server: nginx/1.10.3
Date: Tue, 11 Mar 2025 12:56:50 GMT
Content-Type: text/html
Content-Length: 173
Connection: keep-alive
 
 
kali@kali:~/PEN-200/PG_PRACTICE/wombo$ curl -I http://$IP/
HTTP/1.1 200 OK
Server: nginx/1.10.3
Date: Tue, 11 Mar 2025 12:56:55 GMT
Content-Type: text/html
Content-Length: 612
Last-Modified: Fri, 24 Apr 2020 09:27:19 GMT
Connection: keep-alive
ETag: "5ea2b0f7-264"
Accept-Ranges: bytes

Webroot It’s the nginx default installation page

Fuzzing

---

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/wombo]
└─$ ffuf -c -w /usr/share/wordlists/seclists/Discovery/Web-Content/big.txt -recursion -u http://$IP/FUZZ -ic
________________________________________________
 :: Method           : GET
 :: URL              : http://192.168.209.69/FUZZ
 :: Wordlist         : FUZZ: /usr/share/wordlists/seclists/Discovery/Web-Content/big.txt
 :: Follow redirects : false
 :: Calibration      : false
 :: Timeout          : 10
 :: Threads          : 40
 :: Matcher          : Response status: 200-299,301,302,307,401,403,405,500
________________________________________________
:: Progress: [20478/20478] :: Job [1/1] :: 1754 req/sec :: Duration: [0:00:12] :: Errors: 0 ::
 
 
┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/wombo]
└─$ ffuf -c -w /usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-lowercase-2.3-medium.txt -recursion -u http://$IP/FUZZ -ic
________________________________________________
 :: Method           : GET
 :: URL              : http://192.168.209.69/FUZZ
 :: Wordlist         : FUZZ: /usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-lowercase-2.3-medium.txt
 :: Follow redirects : false
 :: Calibration      : false
 :: Timeout          : 10
 :: Threads          : 40
 :: Matcher          : Response status: 200-299,301,302,307,401,403,405,500
________________________________________________
                        [Status: 200, Size: 612, Words: 79, Lines: 26, Duration: 25ms]
:: Progress: [207630/207630] :: Job [1/1] :: 1754 req/sec :: Duration: [0:02:00] :: Errors: 0 ::

N/A