So let's list the services again to choose one way too many.
So let's just list the medicine, voidable three services.
All right, so let's just list HTP related vulnerabilities.
And sort them, according to report, no.
Right, so here are some HTP services on the different ports.
Now I'm going to plan on looking for many of them.
But first, I'll start with the ElasticSearch service, so let's copy the service name with its version
number to check the Internet to see if there's a vulnerability.
Right, so just open your browser and.
They set the address bar.
Now.
If you're seeing what I'm seeing, the Rapid Seven site comes up first.
And I'll abandon the search for any additional information, but you can go ahead and read some of the
articles for this vulnerability.
And this is the module name that you will see and we will use.
Now, you can also search ElasticSearch as a phrase in Métis boy.
And I'll reiterate that there's not a right or wrong here, it's just about whatever suits your strategy.
All right.
So copy the name.
Minimize the browser window.
Type use and then paste the name of the module.
Show me the options and let's have a look at the payloads to.
All right, so set payload to.
Java Interpretor Rivers E.S.P.
Show me the options.
OK, set our host to tend tend to 10 set, I'll host to 10 that tend to dot 11.
And I think everything's OK.
So let me show the missing variables.
And there are no missing variables, right, so I can run the module.
Or XPoint.
Another maturity session has also opened, so who am I get Eweida?
Where am I?
CIS info.
And I'll stay at this stage so that I can send the session to the background.
Sessions.
And these are the sessions that are on Métis Portable three.
Rebecca Dimino, let's dig into some of the other services.