# Recon

![](https://2022164620-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtzurpgroDJSMn9AFVmQP%2Fuploads%2FBjLDVuOiSUKzASemERv3%2Fnmap%20scan.PNG?alt=media\&token=6fe7f18e-9f23-4cb5-b1f2-3f9d44f0505c)

Apache web page port did not really offer anything so i initially wanted to carry out a feroxbuster scan. This was not successfully no matter how many times I updated and upgraded the machine, it could not locate feroxbuster. Maybe next time.

![Where the webpage and ports lead to](https://2022164620-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtzurpgroDJSMn9AFVmQP%2Fuploads%2FiCMORFdSfxE6OCwqLcmq%2Fwhere%20the%20web%20page%20leads.PNG?alt=media\&token=8742f7f9-fec0-40a7-a51d-b78b8110fe5f)

### Gobuster for directory traversal

![](https://2022164620-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtzurpgroDJSMn9AFVmQP%2Fuploads%2FZR42hDdlY72f6w2s1xEZ%2FGobuster%20for%20directory%20traversal.PNG?alt=media\&token=e5eefadc-9b12-4988-a726-bf45d96c48bf)

The only directory that offered anything useful was console as shown below

![](https://2022164620-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtzurpgroDJSMn9AFVmQP%2Fuploads%2FTVYeTRLVRSGVtCAyzaVs%2FConsole%20directory%20found%20from%20traversal.PNG?alt=media\&token=defa81de-e8c3-4352-b8f4-2564f3edb988)

I tried the basic admin admin with no success. So i looked at the page source (CTRL + U)

![](https://2022164620-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtzurpgroDJSMn9AFVmQP%2Fuploads%2FK4SbFZRRw9S81T0cO4zJ%2FI%20tried%20admin%20admin%20with%20no%20success.PNG?alt=media\&token=934eddd7-0990-4979-9a7f-a8950577c3b5)

![](https://2022164620-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtzurpgroDJSMn9AFVmQP%2Fuploads%2F1FyXKFzv76bPBD4O8SRd%2Fcontrol%20U.PNG?alt=media\&token=2296fd17-4cbf-4759-90fd-e0b0c02360bd)

Within the view source **console/index.php** there is javascript code "function handleSubmit() \["at the top, its javascript code so its going to run client side within web browser. The function is a handle submit for when the form is submitted and it runs the afore mentioned function. Scrolling near to the end of the obsufcated code, I managed to find a weird string. It said&#x20;

Once i typed in javascript deobfuscator (lelinhtinh.github.io/de4js/) and copied the string into it and selected the option "packer". I was able to read it more clearly. It alluded to trying webpages ending in "phps" instead of just "php".

