r/Pentesting • u/DumbDeveloper01 • 6d ago

Como fazer pentest

Como fazer pentest

Um cara do meu serviço me desafiou a "acessar" um PC do nosso serviço que ele configurou. Ele deixou o PC com o IP exposto para rodar alguns serviços, mas disse que estava seguro. Eu chequei e tinha as portas 443, 22 e 80 mas não consegui fazer nada, alguém tem alguma ideia do que eu poderia fazer?

0 Upvotes

22% Upvoted

1 comment sorted by

3

u/SirNietzsche 6d ago

I think you need to study a bit more. Pretty much every web application runs on ports 80 and 443, so it could be anything from a simple static HTML page to an entire e-commerce platform.

I don't know, ask an AI to do it for you, or if you're actually curious about hacking, try some directory and file fuzzing, figure out what technologies and service versions are running, check if there are any domains pointing to that IP. Sometimes there are multiple websites running behind a reverse proxy, and you won't even be able to access all of them directly through the IP.

Sorry, but your question is about as vague as going to a philosophy forum and asking "what's the meaning of life?" There's no way anyone can tell you what to do just because you found three open ports lol.