80

adot@pwndot:~/htb/union$ ffuf -w ~/opt/wordlists/directory-list-2.3-medium.txt -u http://10.10.11.128/FUZZ -e .php

        /'___\  /'___\           /'___\
       /\ \__/ /\ \__/  __  __  /\ \__/
       \ \ ,__\\ \ ,__\/\ \/\ \ \ \ ,__\
        \ \ \_/ \ \ \_/\ \ \_\ \ \ \ \_/
         \ \_\   \ \_\  \ \____/  \ \_\
          \/_/    \/_/   \/___/    \/_/

       v2.1.0-dev
________________________________________________

 :: Method           : GET
 :: URL              : http://10.10.11.128/FUZZ
 :: Wordlist         : FUZZ: /home/adot/opt/wordlists/directory-list-2.3-medium.txt
 :: Extensions       : .php
 :: Follow redirects : false
 :: Calibration      : false
 :: Timeout          : 10
 :: Threads          : 40
 :: Matcher          : Response status: 200-299,301,302,307,401,403,405,500
________________________________________________

index.php               [Status: 200, Size: 1220, Words: 158, Lines: 43, Duration: 53ms]
                        [Status: 200, Size: 1220, Words: 158, Lines: 43, Duration: 53ms]
css                     [Status: 301, Size: 178, Words: 6, Lines: 8, Duration: 44ms]
firewall.php            [Status: 200, Size: 13, Words: 2, Lines: 1, Duration: 47ms]
config.php              [Status: 200, Size: 0, Words: 1, Lines: 1, Duration: 43ms]
challenge.php           [Status: 200, Size: 772, Words: 48, Lines: 21, Duration: 46ms]

Boom