I am trying to learn about security and penetration testing. So far I've learned how to work with Metasploit (MSFconsole) and nmap (db_nmap).
I am using 2 VMs, one with Kali and the second with Debian server.
After running nmap on the server I got these results:
So, I tried to find an exploit for these services, without result. I searched in the auxiliary/scanner folder and also in the exploit folder and found nothing. I searched CVEdetails for these exposed HTTP services and I found this.
There exist many exploits for the HTTP service, So my questions are:
How can I exploit this service, How should I select the specific exploit and payload to use?
How do you recommend continuing the penetration test?