You've been on a machine 30+ minutes. Nothing is working. Do this in order.
- 01Re-read ALL scan output. Slowly. Port you ignored?
- 02Re-run gobuster with a DIFFERENT wordlist (big.txt, raft-large-directories.txt)
- 03Check for virtual hosts (vhosts) · add domain to /etc/hosts, try different headers
- 04Run UDP scan if you haven't yet
- 05Read service banners manually: nc -nv <TARGET-IP> <PORT>
- 06Try all found usernames on all found services
- 07Check if web app has a CMS · run wpscan/joomscan
- 08Look for exploits against the OS version, not just the service
- 09Check for backup files: .bak, .old, .swp, ~, .zip, .tar.gz at every web path
- 10Re-read the box description / tags if on HTB/PG · they sometimes hint the vector
- 11Check HackTricks for the specific service / port
- 12Take a 10-minute break. Fresh eyes catch what tired eyes miss.