vmdak_Web_80

Web

---

Nmap discovered a Web server on the target port 80 The running service is Apache httpd 2.4.58 ((Ubuntu))

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/vmdak]
└─$ curl -I -X OPTIONS http://vmdak.local/
HTTP/1.1 200 OK
Date: Wed, 09 Apr 2025 17:34:11 GMT
Server: Apache/2.4.58 (Ubuntu)
Allow: HEAD,GET,POST,OPTIONS
Content-Length: 0
Content-Type: text/html
 
 
 
┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/vmdak]
└─$ curl -I http://vmdak.local/        
HTTP/1.1 200 OK
Date: Wed, 09 Apr 2025 17:34:15 GMT
Server: Apache/2.4.58 (Ubuntu)
Last-Modified: Tue, 20 Aug 2024 09:21:26 GMT
ETag: "29af-62019f330e3c2"
Accept-Ranges: bytes
Content-Length: 10671
Vary: Accept-Encoding
Content-Type: text/html

Webroot It’s the default Apache installation page

Fuzzing

---

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/vmdak]
└─$ ffuf -c -w /usr/share/wordlists/seclists/Discovery/Web-Content/big.txt -u http://vmdak.local/FUZZ -ic -e .html,.txt,.php -fc 403
________________________________________________
 :: Method           : GET
 :: URL              : http://vmdak.local/FUZZ
 :: Wordlist         : FUZZ: /usr/share/wordlists/seclists/Discovery/Web-Content/big.txt
 :: Extensions       : .html .txt .php 
 :: Follow redirects : false
 :: Calibration      : false
 :: Timeout          : 10
 :: Threads          : 40
 :: Matcher          : Response status: 200-299,301,302,307,401,403,405,500
 :: Filter           : Response status: 403
________________________________________________
index.html              [Status: 200, Size: 10671, Words: 3496, Lines: 364, Duration: 50ms]
:: Progress: [81912/81912] :: Job [1/1] :: 1307 req/sec :: Duration: [0:01:02] :: Errors: 0 ::
 
 
 
┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/vmdak]
└─$ ffuf -c -w /usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-lowercase-2.3-medium.txt -u http://vmdak.local/FUZZ/ -ic
________________________________________________
 :: Method           : GET
 :: URL              : http://vmdak.local/FUZZ/
 :: Wordlist         : FUZZ: /usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-lowercase-2.3-medium.txt
 :: Follow redirects : false
 :: Calibration      : false
 :: Timeout          : 10
 :: Threads          : 40
 :: Matcher          : Response status: 200-299,301,302,307,401,403,405,500
________________________________________________
                        [Status: 200, Size: 10671, Words: 3496, Lines: 364, Duration: 36ms]
icons                   [Status: 403, Size: 276, Words: 20, Lines: 10, Duration: 29ms]
server-status           [Status: 403, Size: 276, Words: 20, Lines: 10, Duration: 32ms]
:: Progress: [207630/207630] :: Job [1/1] :: 1754 req/sec :: Duration: [0:02:24] :: Errors: 0 ::

N/A

Virtual Host / Sub-domain Discovery

---

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/vmdak]
└─$ ffuf -c -w /usr/share/wordlists/seclists/Discovery/DNS/subdomains-top1million-110000.txt -u http://$IP/ -H 'Host: FUZZ.vmdak.local' -ic -mc all -fs 10671
________________________________________________
 :: Method           : GET
 :: URL              : http://192.168.125.103/
 :: Wordlist         : FUZZ: /usr/share/wordlists/seclists/Discovery/DNS/subdomains-top1million-110000.txt
 :: Header           : Host: FUZZ.vmdak.local
 :: Follow redirects : false
 :: Calibration      : false
 :: Timeout          : 10
 :: Threads          : 40
 :: Matcher          : Response status: all
 :: Filter           : Response size: 10671
________________________________________________
:: Progress: [114437/114437] :: Job [1/1] :: 398 req/sec :: Duration: [0:01:32] :: Errors: 0 ::

N/A