hackerNote

IP TARGET

10.10.224.42

IP ATTACKER

10.21.171.239

nmap

nmap -A $TARGET -T4 -p- --oN nmap.txt

Starting Nmap 7.93 ( <https://nmap.org> ) at 2025-10-01 21:53 CEST
Nmap scan report for 10.10.224.42
Host is up (0.032s latency).
Not shown: 65532 closed tcp ports (reset)
PORT     STATE SERVICE VERSION
22/tcp   open  ssh     OpenSSH 7.6p1 Ubuntu 4ubuntu0.3 (Ubuntu Linux; protocol 2.0)
| ssh-hostkey:
|   2048 10a6953462b0562a38157758f4f36cac (RSA)
|   256 6f1827a4e7219d4e6d55b3acc52dd5d3 (ECDSA)
|_  256 2dc31b584dc35d8e6af6379dcaad207c (ED25519)
80/tcp   open  http    Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|_http-title: Home - hackerNote
8080/tcp open  http    Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|_http-title: Home - hackerNote
|_http-open-proxy: Proxy might be redirecting requests

• Ubuntu
  • SSH/22 OpenSSH 7.6p1
  • HTTP/80 Golang net/http server
  • HTTP/8080 Golang net/http server

http://10.10.224.42/

http://10.10.224.42/login/

• create user admin:admin then login into http://10.10.224.42/notes/

# API found

<http://10.10.224.42/api/user/login> (POST) {"username":"admin","password":"sssss"}
<http://10.10.224.42/api/note/new> (POST) {"noteTitle":"s","noteContent":"s"}
<http://10.10.224.42/api/note/list> (GET) {"noteID":2,"userID":3,"noteTitle":"test","noteContent":"tzst\n"},{"noteID":3,"userID":3,"noteTitle":"s","noteContent":"s"}]

• On teste une liste de noms avec Burpsuite (/api/user/login)

• Dans les résultats de l’intruder on regarde la colonne Response completed et on trie dessus pour mettre en avant les “usernames” qui ont généré les résultats les plus longs

• admin (user créé manuellement)
• james (user découvert)