WEB FUZZING Skills Assessment

HTB Content Academy
24

Same, I tried ffuf with this command

ffuf -w /home/resertie/Desktop/Scripts/SecLists/Discovery/Web-Content/common.txt -u http://academy.htb:41523/admin/panel.php?accessID=FUZZ -fc 200

I don’t get anything

25

ffuf -u http://94.237.59.199:36870/admin/panel.php?accessID=FUZZ -ic -w /usr/share/seclists/Discovery/Web-Content/common.txt -fs 58

    /'___\  /'___\           /'___\       
   /\ \__/ /\ \__/  __  __  /\ \__/       
   \ \ ,__\\ \ ,__\/\ \/\ \ \ \ ,__\      
    \ \ \_/ \ \ \_/\ \ \_\ \ \ \ \_/      
     \ \_\   \ \_\  \ \____/  \ \_\       
      \/_/    \/_/   \/___/    \/_/       

   v2.1.0-dev

:: Method : GET
:: URL : http://94.237.59.199:36870/admin/panel.php?accessID=FUZZ
:: Wordlist : FUZZ: /usr/share/seclists/Discovery/Web-Content/common.txt
:: Follow redirects : false
:: Calibration : false
:: Timeout : 10
:: Threads : 40
:: Matcher : Response status: 200-299,301,302,307,401,403,405,500
:: Filter : Response size: 58

getaccess [Status: 200, Size: 68, Words: 12, Lines: 1, Duration: 147ms]
:: Progress: [4734/4734] :: Job [1/1] :: 267 req/sec :: Duration: [0:00:20] :: Errors: 0 ::

2 Likes
26

Hi,
is it possible that this module/this skill assessment is currently being edited? I can’t fuzz /admin/panel.php but i found /admin/index.php

vHost or subdomain fuzzing didnt lead to anything…

27

Did you solve it yet? am stuck on the same issue here

28

this is the full URL

http://hidden.fuzzing_fun.htb:PORT/godeep/stoneedge/bbclone/typo3/

remember to add hidden.fuzzing_fun.htb in /etc/hosts

29

Quite simple, the hint was that the folders might be on fuzzing_fun.htb “or not” meaning there is a vhost subdomain somewhere.

The key difference between VHosts and sub-domains is that a VHost is basically a ‘sub-domain’ served on the same server and has the same IP, such that a single IP could be serving two or more different websites.

so in this example running this command will do the trick:

Command Line

ffuf -w SecLists/Discovery/Web-Content/common.txt:FUZZ -u http://fuzzing_fun.htb:PORT -H 'Host: FUZZ.fuzzing_fun.htb'
this will FUZZ any subdomains within the same IP. Be sure to add the found subdomains to your /etc/hosts file!

Hope this helps!

30

This is the correct answer : gobuster fuzz -u http://IP:PORT/admin/FUZZ.html -w WordlistPath/common.txt | grep -F “[Status=200]”

change the IP / PORT and the path to the wordlist