Web Enumeration Walkthrough (HTB)
Hey there,
This is my first HTB Learning blog post, I hope you enjoy it :)
Okay, I am currently taking the Hack the Box Cracking Into Hack the Box Learning Path. This is the second module, named Getting Started.
Target: 94.237.51.163:42226
Aim: Try running some of the web enumeration techniques you learned in this section on the server above, and use the info you get to get the flag.
Let’s get to work,
Firstly, I used the whatweb command to list details about the web server
whatweb 94.237.51.163:42226
Enumerating further, I used gobuster to run a directory scan on the target to find hidden files.
gobuster dir -u http://94.237.51.163:42226 -w /usr/share/dirb/wordlists/common.txt
Sweet got two gems, I now know that the scan identifies a WordPress installation at /wordpress and a /robots.txt file, a file used to tell search engines which parts of the site to avoid and may contain clues ;) I then ran a curl command on the target robots.txt directory, which revealed a hidden admin login page.
curl 94.237.51.163:42226/robots.txt
Opened the admin page on my browser: http://94.237.51.163:42226/admin-login-page.php
I will be able to view sensitive data by login in, sharply I viewed the source code to see if I can get something informative about the login page. it was my lucky day, the dev left a to-do list un-done, which was to remove test credentials that contained the username and password
Logged in and found the flag.
HTB{w3b_3num3r4710n_r3v34l5_53cr375}
Thank you for reading
