2 :80

http://sniper.htb/
Sniper Co.

# exploring links
http://sniper.htb/user/login.php
Login Page

http://sniper.htb/user/registration.php
Registration Page

# nikto
+ Server: Microsoft-IIS/10.0
+ Retrieved x-powered-by header: PHP/7.3.1
| possibly XAMPP?

http://sniper.htb/blog/index.php
Sample page

$ gobuster dir -u http://sniper.htb -w /usr/share/wordlists/dirbuster/directory-list-lowercase-2.3-medium.txt -x php,html,txt -t 90
===============================================================
/blog                 (Status: 301) [Size: 146] [--> http://sniper.htb/blog/]
/images               (Status: 301) [Size: 148] [--> http://sniper.htb/images/]
/index.php            (Status: 200) [Size: 2635]
/user                 (Status: 301) [Size: 146] [--> http://sniper.htb/user/]
/css                  (Status: 301) [Size: 145] [--> http://sniper.htb/css/]
/js                   (Status: 301) [Size: 144] [--> http://sniper.htb/js/]

$ gobuster dir -u http://sniper.htb/user -w /usr/share/wordlists/dirbuster/directory-list-lowercase-2.3-medium.txt -x php,html,txt -t 90
===============================================================
/images               (Status: 301) [Size: 153] [--> http://sniper.htb/user/images/]
/index.php            (Status: 302) [Size: 0] [--> login.php]
/login.php            (Status: 200) [Size: 5456]
/registration.php     (Status: 200) [Size: 5922]
/css                  (Status: 301) [Size: 150] [--> http://sniper.htb/user/css/]
/db.php               (Status: 200) [Size: 0]
/js                   (Status: 301) [Size: 149] [--> http://sniper.htb/user/js/]
/logout.php           (Status: 302) [Size: 3] [--> login.php]
/vendor               (Status: 301) [Size: 153] [--> http://sniper.htb/user/vendor/]
/auth.php             (Status: 302) [Size: 0] [--> login.php]
/fonts                (Status: 301) [Size: 152] [--> http://sniper.htb/user/fonts/]

$ gobuster dir -u http://sniper.htb/blog -w /usr/share/wordlists/dirbuster/directory-list-lowercase-2.3-medium.txt -x php,html,txt -t 90
===============================================================
/index.php            (Status: 200) [Size: 5704]
/header.html          (Status: 200) [Size: 1331]
/css                  (Status: 301) [Size: 150] [--> http://sniper.htb/blog/css/]
/js                   (Status: 301) [Size: 149] [--> http://sniper.htb/blog/js/]
/error.html           (Status: 200) [Size: 1357]

# /blog seems empty
# /user seems the way forward