| Section | Description |
|---|---|
| Target IP | 172.17.0.2 |
| Target Host | Uknown |
| OS | Uknown |
| Kernel Version | Linux |
| Web Application/Sercvice | Apache 2.4.58 (Ubuntu) |
| Application Version | Apache 2.4.58 |
| Open Ports | 5000/tcp (SSH),80/tcp (HTTP), 3000/tcp (HTTP) |
| Test Methodology | Black-box |
| Test Date | 8/12/2026 |
An nmap scan was performed to identify open ports and surfaces
nmap -sC -sV 172.17.0.2
Open Ports:
URL -> <http://172.17.0.2>
A page with a non-functional button is encountered, so web fuzzing is performed using the Gobuster tool to discover available directories:
gobuster dir -u <http://172.17.0.2> -w /usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-lowercase-2.3-medium.txt -x html,php,txt
The contents of the /backend directory are examined.
The file "server.js" contains:
