80

adot@kali:~/htb/Classics/Granny$ gobuster dir -u http://10.10.10.15 -w ~/opt/wordlists/gobuster/dsplusleakypaths.txt
===============================================================
Gobuster v3.6
by OJ Reeves (@TheColonial) & Christian Mehlmauer (@firefart)
===============================================================
[+] Url:                     http://10.10.10.15
[+] Method:                  GET
[+] Threads:                 10
[+] Wordlist:                /home/adot/opt/wordlists/gobuster/dsplusleakypaths.txt
[+] Negative Status codes:   404
[+] User Agent:              gobuster/3.6
[+] Timeout:                 10s
===============================================================
Starting gobuster in directory enumeration mode
===============================================================
/images               (Status: 301) [Size: 149] [--> http://10.10.10.15/images/]
/aspnet_client        (Status: 301) [Size: 158] [--> http://10.10.10.15/aspnet%5Fclient/]
/Images               (Status: 301) [Size: 149] [--> http://10.10.10.15/Images/]
/_private             (Status: 301) [Size: 153] [--> http://10.10.10.15/%5Fprivate/]
/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/var/www/html/index.html (Status: 403) [Size: 32]
/..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/..%5c..%5c..%5c..%5c..%5cetc/passwd (Status: 403) [Size: 32]
/..%5c..%5c..%5c..%5c..%5c..%5cetc/passwd (Status: 403) [Size: 32]
/..%5c..%5c..%5c..%5c..%5c..%5c..%5cetc/passwd (Status: 403) [Size: 32]
/..%5c..%5c..%5c..%5cetc/passwd (Status: 403) [Size: 32]
/..%5cetc/passwd      (Status: 403) [Size: 32]
/..%5c..%5cetc/passwd (Status: 403) [Size: 32]
/..%5c..%5c..%5cetc/passwd (Status: 403) [Size: 32]
/./../../../../../../../../../../etc/passwd (Status: 403) [Size: 32]
///evil.com/%2F..     (Status: 200) [Size: 1433]
//evil.com/%2F..      (Status: 200) [Size: 1433]
/?view=log            (Status: 200) [Size: 1433]
/?wsdl                (Status: 200) [Size: 1433]
/hsqldb%0a            (Status: 400) [Size: 34]
/public/plugins/alertlist/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/alertGroups/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/alertmanager/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/barchart/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/annolist/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/bargauge/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/canvas/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/dashboard/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/dashlist/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/cloudwatch/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/graph/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/elasticsearch/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/gauge/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/geomap/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/grafana/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/gettingstarted/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/debug/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/histogram/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/graphite/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/heatmap/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/icon/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/loki/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/influxdb/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/jaeger/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/live/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/logs/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/mixed/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/mssql/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/news/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/mysql/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/pluginlist/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/nodeGraph/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/stat/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/piechart/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/prometheus/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/postgres/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/opentsdb/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/state-timeline/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/table-old/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/status-history/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/text/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/timeseries/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/table/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/xychart/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/tempo/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/testdata/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/welcome/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/public/plugins/zipkin/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32]
/static/..%5c..%5c..%5c..%5cetc/passwd (Status: 403) [Size: 32]
/static/..%5c..%5c..%5c..%5c..%5c..%5c..%5cetc/passwd (Status: 403) [Size: 32]
/static/..%5c..%5c..%5c..%5c..%5c..%5cetc/passwd (Status: 403) [Size: 32]
/static/..%5c..%5c..%5c..%5c..%5cetc/passwd (Status: 403) [Size: 32]
/static/..%5c..%5c..%5cetc/passwd (Status: 403) [Size: 32]
/static/../../../a/../../../../etc/passwd (Status: 403) [Size: 32]
/static/..%5c..%5cetc/passwd (Status: 403) [Size: 32]
/Trace.axd            (Status: 403) [Size: 2062]
Progress: 3521 / 3522 (99.97%)
===============================================================
Finished
===============================================================

PreviousEumeration NextFoothold

Last updated 11 months ago

Was this helpful?

adot@kali:~/htb/Classics/Granny$ gobuster dir -u http://10.10.10.15 -w ~/opt/wordlists/gobuster/dsplusleakypaths.txt =============================================================== Gobuster v3.6 by OJ Reeves (@TheColonial) & Christian Mehlmauer (@firefart) =============================================================== [+] Url: http://10.10.10.15 [+] Method: GET [+] Threads: 10 [+] Wordlist: /home/adot/opt/wordlists/gobuster/dsplusleakypaths.txt [+] Negative Status codes: 404 [+] User Agent: gobuster/3.6 [+] Timeout: 10s =============================================================== Starting gobuster in directory enumeration mode =============================================================== /images (Status: 301) [Size: 149] [--> http://10.10.10.15/images/] /aspnet_client (Status: 301) [Size: 158] [--> http://10.10.10.15/aspnet%5Fclient/] /Images (Status: 301) [Size: 149] [--> http://10.10.10.15/Images/] /_private (Status: 301) [Size: 153] [--> http://10.10.10.15/%5Fprivate/] /.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/var/www/html/index.html (Status: 403) [Size: 32] /..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /..%5c..%5c..%5c..%5c..%5cetc/passwd (Status: 403) [Size: 32] /..%5c..%5c..%5c..%5c..%5c..%5cetc/passwd (Status: 403) [Size: 32] /..%5c..%5c..%5c..%5c..%5c..%5c..%5cetc/passwd (Status: 403) [Size: 32] /..%5c..%5c..%5c..%5cetc/passwd (Status: 403) [Size: 32] /..%5cetc/passwd (Status: 403) [Size: 32] /..%5c..%5cetc/passwd (Status: 403) [Size: 32] /..%5c..%5c..%5cetc/passwd (Status: 403) [Size: 32] /./../../../../../../../../../../etc/passwd (Status: 403) [Size: 32] ///evil.com/%2F.. (Status: 200) [Size: 1433] //evil.com/%2F.. (Status: 200) [Size: 1433] /?view=log (Status: 200) [Size: 1433] /?wsdl (Status: 200) [Size: 1433] /hsqldb%0a (Status: 400) [Size: 34] /public/plugins/alertlist/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/alertGroups/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/alertmanager/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/barchart/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/annolist/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/bargauge/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/canvas/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/dashboard/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/dashlist/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/cloudwatch/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/graph/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/elasticsearch/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/gauge/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/geomap/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/grafana/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/gettingstarted/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/debug/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/histogram/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/graphite/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/heatmap/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/icon/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/loki/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/influxdb/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/jaeger/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/live/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/logs/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/mixed/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/mssql/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/news/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/mysql/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/pluginlist/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/nodeGraph/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/stat/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/piechart/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/prometheus/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/postgres/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/opentsdb/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/state-timeline/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/table-old/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/status-history/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/text/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/timeseries/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/table/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/xychart/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/tempo/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/testdata/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/welcome/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /public/plugins/zipkin/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd (Status: 403) [Size: 32] /static/..%5c..%5c..%5c..%5cetc/passwd (Status: 403) [Size: 32] /static/..%5c..%5c..%5c..%5c..%5c..%5c..%5cetc/passwd (Status: 403) [Size: 32] /static/..%5c..%5c..%5c..%5c..%5c..%5cetc/passwd (Status: 403) [Size: 32] /static/..%5c..%5c..%5c..%5c..%5cetc/passwd (Status: 403) [Size: 32] /static/..%5c..%5c..%5cetc/passwd (Status: 403) [Size: 32] /static/../../../a/../../../../etc/passwd (Status: 403) [Size: 32] /static/..%5c..%5cetc/passwd (Status: 403) [Size: 32] /Trace.axd (Status: 403) [Size: 2062] Progress: 3521 / 3522 (99.97%) =============================================================== Finished ===============================================================