$ whoami
root

$ sudo nmap -A target.local
Scanning...
22/tcp   open
80/tcp   open
443/tcp  open█

$ curl -I https://target.local
HTTP/2 200
server: nginx
content-type: text/html
x-frame-options: DENY█

$ ssh user@10.10.14.23
user@10.10.14.23's password:
Last login: Tue Oct  3 21:14:07█

$ ffuf -u https://target.local/FUZZ -w wordlist.txt
admin     [Status: 200, Size: 4821]
backup    [Status: 403, Size: 199]█