THM - The Sticker Shop

Target IP - 10.10.10.60

Enumeration

Open Ports

• Port 22 - SSH
• Port 8080 - HTTP

Nmap

Website

We seem to have a simple website about a cat sticker shop. However, there does not seem to be much on this website even including the source code.

There seems to be not much of anything on this page however, looking at the feedback page, there may be a Cross Site Scripting (XSS) vulnerability.

Trying the payload:

We don't get anything, which means either there is nothing going on or there is a blind xss vulnerability.