4.Hosting

┌──(root㉿kali)-[~/Desktop/vulnyx/Hosting]
└─# nmap 192.168.56.21 -sCV
Starting Nmap 7.94SVN ( https://nmap.org ) at 2024-12-23 03:54 EST
Nmap scan report for 192.168.56.21
Host is up (0.00069s latency).
Not shown: 996 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  tcpwrapped
|_http-title: IIS Windows
| http-methods:
|_  Potentially risky methods: TRACE
|_http-server-header: Microsoft-IIS/10.0
135/tcp open  tcpwrapped
139/tcp open  tcpwrapped
445/tcp open  tcpwrapped

Host script results:
| smb2-time:
|   date: 2024-12-23T14:54:55
|_  start_date: N/A
| smb2-security-mode:
|   3:1:1:
|_    Message signing enabled but not required
|_clock-skew: 5h59m58s
|_nbstat: NetBIOS name: HOSTING, NetBIOS user: <unknown>, NetBIOS MAC: 08:00:27:46:6d:91 (Oracle VirtualBox virtual NIC)

Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 25.36 seconds

┌──(root㉿kali)-[~/Desktop/vulnyx/Hosting]
└─# gobuster dir -u http://192.168.56.21/ -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -x html,txt,zip
===============================================================
Gobuster v3.6
by OJ Reeves (@TheColonial) & Christian Mehlmauer (@firefart)
===============================================================
[+] Url:                     http://192.168.56.21/
[+] Method:                  GET
[+] Threads:                 10
[+] Wordlist:                /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt
[+] Negative Status codes:   404
[+] User Agent:              gobuster/3.6
[+] Extensions:              txt,zip,html
[+] Timeout:                 10s
===============================================================
Starting gobuster in directory enumeration mode
===============================================================
/speed                (Status: 301) [Size: 161] [--> http://192.168.56.21/speed/]

┌──(root㉿kali)-[~/Desktop/vulnyx/Hosting]
└─# dirsearch -u http://192.168.56.21/speed
/usr/lib/python3/dist-packages/dirsearch/dirsearch.py:23: DeprecationWarning: pkg_resources is deprecated as an API. See https://setuptools.pypa.io/en/latest/pkg_resources.html
  from pkg_resources import DistributionNotFound, VersionConflict

  _|. _ _  _  _  _ _|_    v0.4.3
 (_||| _) (/_(_|| (_| )

Extensions: php, aspx, jsp, html, js | HTTP method: GET | Threads: 25 | Wordlist size: 11460

Output File: /root/Desktop/vulnyx/Hosting/reports/http_192.168.56.21/_speed_24-12-23_04-02-31.txt

Target: http://192.168.56.21/

[04:02:31] Starting: speed/
[04:02:31] 301 -  164B  - /speed/js  ->  http://192.168.56.21/speed/js/
[04:02:31] 403 -  312B  - /speed/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd
[04:02:33] 403 -  312B  - /speed/\..\..\..\..\..\..\..\..\..\etc\passwd
[04:02:37] 403 -  312B  - /speed/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd
[04:02:38] 301 -  165B  - /speed/css  ->  http://192.168.56.21/speed/css/
[04:02:40] 301 -  167B  - /speed/fonts  ->  http://192.168.56.21/speed/fonts/
[04:02:41] 301 -  168B  - /speed/images  ->  http://192.168.56.21/speed/images/
[04:02:41] 403 -    1KB - /speed/images/
[04:02:41] 403 -    1KB - /speed/js/

Task Completed