Before anything else, download the VulnCMS 1 machine from VulnHub https://download.vulnhub.com/vulncms/VulnCMS.ova and import it into your virtualization software (such as VirtualBox).
Make sure both your VulnCMS machine and your Kali Linux machine are set to use a Bridged Adapter in their network settings. This ensures that both machines are on the same network and can communicate with each other.
Power on your Kali machine and open a terminal. Run the following command to scan your local network and discover live hosts:
sudo netdiscoverPress enter or click to view image in full size
Look for a new IP address that belongs to the VulnCMS machine. In my case, the target IP was 192.168.105.7. (PCS Systemtechnik GmbH)
Now that you have the target machine’s IP address, it’s time to gather information about what services it is running. This step is crucial because it helps us identify potential entry points.