80

❯ echo 10.10.11.68 planning.htb | sudo tee -a /etc/hosts
[sudo] password for adot:
10.10.11.68 planning.htb

❯ ffuf -H 'Host: FUZZ.planning.htb' -w ~/opt/wordlists/subdomain_custom.txt:FUZZ -u http://planning.htb -fs 178 -t 200

        /'___\  /'___\           /'___\
       /\ \__/ /\ \__/  __  __  /\ \__/
       \ \ ,__\\ \ ,__\/\ \/\ \ \ \ ,__\
        \ \ \_/ \ \ \_/\ \ \_\ \ \ \ \_/
         \ \_\   \ \_\  \ \____/  \ \_\
          \/_/    \/_/   \/___/    \/_/

       v2.1.0-dev
________________________________________________

 :: Method           : GET
 :: URL              : http://planning.htb
 :: Wordlist         : FUZZ: /home/adot/opt/wordlists/subdomain_custom.txt
 :: Header           : Host: FUZZ.planning.htb
 :: Follow redirects : false
 :: Calibration      : false
 :: Timeout          : 10
 :: Threads          : 200
 :: Matcher          : Response status: 200-299,301,302,307,401,403,405,500
 :: Filter           : Response size: 178
________________________________________________

grafana                 [Status: 302, Size: 29, Words: 2, Lines: 3, Duration: 56ms]
:: Progress: [250691/250691] :: Job [1/1] :: 4524 req/sec :: Duration: [0:00:58] :: Errors: 0 ::

❯ echo 10.10.11.68 grafana.planning.htb | sudo tee -a /etc/hosts
10.10.11.68 grafana.planning.htb

Use the provided credentials to sign in

admin:0D5oT70Fq13EvB5r