Nmap
Starting Nmap 7.94SVN ( https://nmap.org ) at 2025-03-10 10:16 EDT
Nmap scan report for 192.168.141.25
Host is up (0.065s latency).
Not shown: 996 closed tcp ports (conn-refused)
PORT STATE SERVICE VERSION
22/tcp open ssh OpenSSH 8.4p1 Debian 5+deb11u1 (protocol 2.0)
80/tcp open http nginx 1.18.0
8082/tcp open http Barracuda Embedded Web Server
9999/tcp open ssl/abyss?
Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 36.38 seconds
80
dirb
nothing
8082
keep loading
dirb
cant find
9999
after search abyss also is a web server, and cant access too
seems have some return
nothing means
dirb
cant
Try searchsploit
let’s try 21367
Hits
After saw walkthought, we can access 8082, it is because network problem or something.
192.168.53.25
setting up the admin
from about we can know the version of the application
try search sploit
cant work, since the admin had already created, try find someelse
we can upload something we want, and we can identify it is lua script, so we use lsp reverse shell
into it