Web Enumeration Flashcards
Gobuster is used for website enumeration of what two things?
- File/directories.
- Subdomains
Gobuster flag mode for enumerating URL directories and files
Dir
Gobuster syntax for enumerating directories and files for a website
gobuster dir -u (url) -w (wordlist.txt)
Gobuster flag mode for enumerating URL subdomains
dns
Gobuster syntax for enumerating URL subdomains
gobuster dns -d (domain) -w (wordlist.txt)
What’s a popular GitHub repo that contains useful lists for fuzzing and exploitation.
/danielmiessler/SecLists
How to download and install the SecLists Gthub repo?
git clone https://github.com/danielmiessler/SecLists
sudo apt install seclists -y
When using Gobuster to enumerate a subdomain. Where do we add a live DNS server i.e. 1.1.1.1?
/etc/resolv.conf file
Curl command syntax for banner grabbing
curl -IL https://URL
A handy tool that takes screenshots of the target web application, fingerprints them, and identify possible default credentials.
EyeWitness
Extracts the version of webservers, supporting frameworks and applications. We can use this info to pinpoint technologies in use and begin searching for potential vulnerabilities.
Whatweb
Whatweb syntax for enumerating
Whatweb (IP)
What info can we get from SSL/TLS certificates
Email address and company name and use this to do a phishing attack.
This file is used to instruct search engine web crawlers on which resource should and should not be indexed into a search engine.
robots.txt
Shortcut to bring up the source code window in browser.
[CTRL + U]
