nmap — min-rate=1000 -T4 -p- -sV -sC 10.129.227.227 Starting Nmap 7.94SVN ( https://nmap.org ) at 2025–07–08 12:05 CDT Nmap scan report for 10.129.227.227 Host is up (0.26s latency). Not shown: 65533 closed tcp ports (reset) PORT STATE SERVICE VERSION 22/tcp open ssh OpenSSH 8.2p1 Ubuntu 4ubuntu0.5 (Ubuntu Linux; protocol 2.0) | ssh-hostkey: | 3072 9e:1f:98:d7:c8:ba:61:db:f1:49:66:9d:70:17:02:e7 (RSA) | 256 c2:1c:fe:11:52:e3:d7:e5:f7:59:18:6b:68:45:3f:62 (ECDSA) |_ 256 5f:6e:12:67:0a:66:e8:e2:b7:61:be:c4:14:3a:d3:8e (ED25519) 80/tcp open http Apache httpd 2.4.41 ((Ubuntu)) |_http-title: Is my Website up ? |_http-server-header: Apache/2.4.41 (Ubuntu) Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel

Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 81.81 seconds

sudo sh -c 'echo "SERVER_IP siteisup.htb" >> /etc/hosts'

None

gobuster dir -w raft-small-words.txt -u http://10.129.227.227/ =============================================================== Gobuster v3.6 by OJ Reeves (@TheColonial) & Christian Mehlmauer (@firefart) =============================================================== [+] Url: http://10.129.227.227/ [+] Method: GET [+] Threads: 10 [+] Wordlist: raft-small-words.txt [+] Negative Status codes: 404 [+] User Agent: gobuster/3.6 [+] Timeout: 10s =============================================================== Starting gobuster in directory enumeration mode =============================================================== /.html (Status: 403) [Size: 279] /.php (Status: 403) [Size: 279] /.htm (Status: 403) [Size: 279] /dev (Status: 301) [Size: 314] [ → http://10.129.227.227/dev/] /. (Status: 200) [Size: 1131]

None
None
None
None
None
None
None
None

ffuf -w raft-small-words.txt -u http://siteisup.htb/dev/FUZZ -fs 277

/'___\ /'___\ /'___\ /\ \__/ /\ \__/ __ __ /\ \__/ \ \ ,__\\ \ ,__\/\ \/\ \ \ \ ,__\ \ \ \_/ \ \ \_/\ \ \_\ \ \ \ \_/ \ \_\ \ \_\ \ \____/ \ \_\ \/_/ \/_/ \/___/ \/_/

v2.1.0-dev ________________________________________________

:: Method : GET :: URL : http://siteisup.htb/dev/FUZZ :: Wordlist : FUZZ: /usr/share/seclists/Discovery/Web-Content/raft-small-words.txt :: Follow redirects : false :: Calibration : false :: Timeout : 10 :: Threads : 40 :: Matcher : Response status: 200–299,301,302,307,401,403,405,500 :: Filter : Response size: 277 ________________________________________________

. [Status: 200, Size: 0, Words: 1, Lines: 1, Duration: 256ms] .git [Status: 301, Size: 315, Words: 20, Lines: 10, Duration: 259ms]

None
None