https://ioctl.lol/tags/web-config-upload/Recent content in Web-Config-Upload on ioctlHugoenioctlMon, 25 Nov 2024 00:00:00 +0000https://ioctl.lol/ctf/htb/bounty/Mon, 25 Nov 2024 00:00:00 +0000https://ioctl.lol/ctf/htb/bounty/<div class="box-info"> <table> <tr><th colspan="2">ターゲット // Bounty</th></tr> <tr><td>Platform</td><td>HTB</td></tr> <tr><td>OS</td><td>Windows</td></tr> <tr><td>Difficulty</td><td>Easy</td></tr> <tr><td>IP</td><td><code>10.129.X.X</code></td></tr> </table> </div> <style> .box-info table { max-width: 400px; margin: 1.5em 0; } .box-info th { text-align: center; font-size: 1.1em; letter-spacing: 0.08em; } </style> <hr> <h2 id="enumeration">Enumeration</h2> <h3 id="nmap">Nmap</h3> <details class="collapse-section"> <summary>▶ Nmap output</summary> <div class="collapse-content"> <pre tabindex="0"><code>PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS httpd 7.5 |_http-title: Bounty |_http-server-header: Microsoft-IIS/7.5 | http-methods: | Supported Methods: OPTIONS TRACE GET HEAD POST |_ Potentially risky methods: TRACE Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows </code></pre> </div> </details> <style> .collapse-section { border: 1px dashed var(--accent-alpha-20); padding: 0.5em 1em; margin: 1em 0; cursor: pointer; } .collapse-section[open] summary { margin-bottom: 0.8em; border-bottom: 1px dashed var(--accent-alpha-20); padding-bottom: 0.5em; } .collapse-section summary { font-weight: 700; color: var(--accent); outline: none; } .collapse-content { padding-top: 0.5em; } </style> <h3 id="port-80---iis-75">Port 80 - IIS 7.5</h3> <p>Directory fuzzing reveals two interesting hits:</p>