3 :80

We are providing Dynamic DNS for a number of domains:
- dnsalias.htb
- dynamicdns.htb
- no-ip.htb
We are still running in beta mode. Please use following shared credentials:
- Username: dynadns
- Password: sndanyd
- Email: [e-mail]

# adding to /etc/hosts
# 10.10.10.244 dnsalias.htb dynamicdns.htb no-ip.htb dyna.htb dynstr.htb
# nothing on the domains, same website.

$ gobuster dir -u 10.10.10.244 -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -t 80 -x php,html,txt
===============================================================
2021/08/02 16:14:07 Starting gobuster in directory enumeration mode
===============================================================
/assets               (Status: 301) [Size: 313] [--> http://10.10.10.244/assets/]
/index.html           (Status: 200) [Size: 10909]
/nic                  (Status: 301) [Size: 310] [--> http://10.10.10.244/nic/]
/attribution.txt      (Status: 200) [Size: 280]

http://dyna.htb/nic/
empty-page

http://dyna.htb/attribution.txt
Attribution for the images used:
https://www.pexels.com/photo/time-lapse-photography-of-blue-lights-373543/
https://www.pexels.com/photo/black-and-gray-mining-rig-1148820/
https://www.pexels.com/photo/white-and-blue-cables-2881229/
Bootstrap Template:
https://templatemag.com/

# ffuf
$ ffuf -ic -w /usr/share/wordlists/dirb/common.txt -e '.html' -u "http://10.10.10.244:80/nic/FUZZ"
update                  [Status: 200, Size: 8, Words: 1, Lines: 2]


http://dyna.htb/nic/update
badauth

# need to supply some user and pass
# using curl
$ curl -u dynadns:sndanyd http://10.10.10.244/nic/update
nochg 10.10.16.161