03 Web Enumeration

Port 80/443 Enumeration
1
# Sub-folder checking
2
dirb http://10.10.10.158/ /usr/share/wordlists/dirb/common.txt -o dirb-158.result 
3
gobuster dir -u 'http://10.10.10.158/' -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -o gobuster-158.result 
4
python3 /root/Documents/ctf/tools/dirsearch/dirsearch.py -u http://10.10.10.158/ -e jsp,txt -x 301,302,403,404 --simple-report=dirsearch-158.result
5
​
6
-- https://github.com/ffuf/ffuf
7
ffuf -w /usr/share/wordlists/dirb/common.txt -u http://10.10.10.175/
8
​
9
​
10
# Nikto
11
nikto -h http://10.11.1.111
12
​
13
# Nikto with squid proxy
14
nikto -h 10.11.1.111 -useproxy http://10.11.1.111:4444
15
​
16
# CMS Explorer
17
cms-explorer -url http://10.11.1.111 -type [Drupal, WordPress, Joomla, Mambo]
Copied!
​

PenTest & Exploitation Guide - Previous

02 Port Enumeration

Next - PenTest & Exploitation Guide

04 Windows Enum & Exploit

Last modified 11mo ago

Copy link