Active Infrastructure Identification

vHosts needed for these questions:

• app.inlanefreight.local

• dev.inlanefreight.local

What Apache version is running on app.inlanefreight.local? (Format: 0.0.0)

For this question we just have to execute the command whatweb -a3 app.inlanefreight.local -v

And the Apache version is 2.4.41

Which CMS is used on app.inlanefreight.local? (Format: word)

For this question we can use again the whatweb command:

whatweb -a3 app.inlanefreight.local -v

or the Wappalyzer plugin:

And we are able to identify the CMS, Joomla

On which operating system is the dev.inlanefreight.local webserver running on? (Format: word)

There are many ways to answer this question, this time we’ll use curl with the commands:

export TARGET="dev.inlanefreight.local" 
curl -I $TARGET

And by the output, we could enumerate the OS, Ubuntu