Web
Nmap discovered a Web server on the target port 8080
The running service has not been identified
kali@kali:~/PEN-200/PG_PRACTICE/wombo$ curl -I -X OPTIONS http://$IP:8080/
HTTP/1.1 200 OK
X-DNS-Prefetch-Control: off
X-Frame-Options: SAMEORIGIN
X-Download-Options: noopen
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: strict-origin-when-cross-origin
X-Powered-By: NodeBB
Allow: GET,HEAD
Content-Type: text/html; charset=utf-8
Content-Length: 8
ETag: W/"8-ZRAf8oNBS3Bjb/SU2GYZCmbtmXg"
Vary: Accept-Encoding
Date: Tue, 11 Mar 2025 12:57:05 GMT
Connection: keep-alive
kali@kali:~/PEN-200/PG_PRACTICE/wombo$ curl -I http://$IP:8080/
HTTP/1.1 200 OK
X-DNS-Prefetch-Control: off
X-Frame-Options: SAMEORIGIN
X-Download-Options: noopen
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: strict-origin-when-cross-origin
X-Powered-By: NodeBB
set-cookie: _csrf=Ve9YIm1WA8WrbW6HSF12s3jq; Path=/
Content-Type: text/html; charset=utf-8
Content-Length: 18181
ETag: W/"4705-fuNorXGhuW28kAICRPaMdohocUU"
Vary: Accept-Encoding
Date: Tue, 11 Mar 2025 12:57:10 GMT
Connection: keep-alive
Webroot
It appears to be some kind of an online forum and is powered by NodeBB
NodeBB is an open-source forum software built on Node.js that provides a modern, dynamic platform for online communities. It uses web sockets to enable real-time interactions and notifications, making conversations feel immediate and engaging. The platform is highly customizable, supporting a variety of plugins and themes to tailor the experience to different needs. With its mobile-friendly design and scalable performance, NodeBB is suitable for both small groups and large organizations.
Login
The login page doesn’t seem right as it does not render any form
Register
Registration requires agreeing to the EULA.
N/A
There is not much to do.