Skills Assessment

Scenario

Inlanefreight, our valued client, has contacted us to conduct an external penetration test against some of their web applications. However, this is not just any ordinary penetration test because they are on the brink of launching a groundbreaking PDF creator.

Inlanefreight has provided us with a list of subdomains and their corresponding local port numbers where the web applications live, all within the defined scope of this penetration test. Any targets beyond the boundaries of this explicitly mentioned list are strictly off-limits and fall outside the scope of our assessment.

In-Scope Subdomains

To add these subdomains to your /etc/hosts file, use the command below, replacing <Target_IP> with the spawned target's IP address:

[!bash!]$ sudo tee -a /etc/hosts > /dev/null <<EOT

## inlanefreight hosts 
<Target_IP> library.inlanefreight.local vault.inlanefreight.local webmin.inlanefreight.local pdf.inlanefreight.local
EOT

Harness the modern web exploitation techniques you learned in this module to disclose all of Inlanefreight's security vulnerabilities.