developersRus — TryHackMe

developersRus

port 80: is web server, but havent found content there yet

port 8080: nginx/1.18.0 is web server, and have found “progress”

port 8081: seems is proxy server blackice-icecap? Werkzeug/2.2.2 http://10.10.206.4:8081/console

http://10.10.206.4:8080/FUZZ

found "progress" dir

01SMTP enum:
0210.10.206.4: mail exists
0310.10.206.4: root exists
0410.10.206.4: andy exists
0510.10.206.4: news exists
0610.10.206.4: erik exists
0710.10.206.4: man exists
0810.10.206.4: bin exists
0910.10.206.4: ray exists
1010.10.206.4: games exists
1110.10.206.4: nobody exists
1210.10.206.4: backup exists
1310.10.206.4: daemon exists
1410.10.206.4: proxy exists
15 
16FTP&SSH bruteforce:
17andy / y

progression

$IP:8081/console

intercept request, change auth:false to true, gets me passed pin code ^ this is wrong, if u refresh it doesnt last

found ftp creds wget -r ftp://andy:conceivable@10.10.186.207