http://r2km7u25qebaefa7b6jdcjldymc2u337vzpx7ne773ypgs3qlq4xycqd.onion/index.php?page=dripping_blues
After standard directory fuzzing yielded no results, I switched to API parameter fuzzing: $ ffuf -u http://[TARGET_IP]/?FUZZ=/etc/dripispowerful.html -w /path/to/wordlists/directory-list-1.0.txt This revealed a parameter named "drip" that could be used to access the file: drip [Status: 200, Size: 590, Words: 52, Lines: 41, Duration: 4ms] Accessing http://[TARGET_IP]/?