Dawn — VulnHub (192.168.202.11)

nmap -sV -sC -p- 192.168.202.11 -Pn -A --open

#vulnhub#vulnhub#walkthrough#boxes#os:linux

Dawn — VulnHub (192.168.202.11)

Port Enumeration

🐺 howlsec@kalishell

$nmap -sV -sC -p- 192.168.202.11 -Pn -A --open
$80/tcp   open  http        Apache 2.4.38 (Debian)
$139/445  open  netbios-ssn Samba smbd 4.9.5-Debian (workgroup: WORKGROUP)
$3306/tcp open  mysql       MariaDB 5.5.5-10.3.15

Web Enumeration

🐺 howlsec@kalishell

$feroxbuster -u http://dawn -r -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -t 50 --scan-dir-listings

The attack surface is the Apache site on 80 plus an exposed Samba service (139/445) and MariaDB (3306) — Samba share enumeration and the web app are the starting points for this VulnHub box.