Hack The Box

Armageddon write up

Port Scanning

For Finding open ports we use Rustscan .

then used nmap detailed analysis

Web Reconnaissance

So Let’s first enumerate port 80. I decided to start a ffuf scan and got robots.txt and some disallowed entries of files && directories.

Now I visited the webpage and decided to use the

WhatWeb

command for identifying services running for this site and here is the result, it’s Drupal.

Now it’s time to search for exploit available for drupal 7 and for this we can use some ways like using searchexploit in Linux terminal or googling the CMS name.

Now for using exploit for Durpal7 we use msfconsole