Port enumeration

Using nmap I can only see a http service on. 333c656b0c6a950c43b55fa3570ca1da.png

Web enumeration.

In the index I found the nginx default page. c527a34445dc1d1f799a3fa8c0ebb11b.png So I decide to use ffuf to found another pages.

ffuf -y /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -r .php -u http://10.129.32.162/FUZZ

Using this I found the page admin.php

admin.php

I go to the page and I found a login page. 13525e5db6a5ec305966195284790c9a.png Using the credentials admin:admin Im able to pass and see the flag. c2e49ed3cff7feba23e6f1036fdd99f6.png