Posts

Showing posts from February, 2023

Directory Enumeration | Shahul Hameed

Image
 Download Paths: 1. https://github.com/danielmiessler/SecLists 2. https://github.com/trickest/wordlists GoBuster: Installation :  sudo apt install gobuster Help: gobuster -h Run :  gobuster dir -u  http://testphp.vulnweb.com  -w /usr/share/wordlists/dirbuster/directory-medium-2.3.txt If you want to list directories and its content based upon certain extensions like .txt, .css, .js etc. for that you can use the  -x  flag gobuster dir -u  http://testphp.vulnweb.com  -w /usr/share/wordlists/dirbuster/directory-medium-2.3.txt -x .txt,html,css,js Dirb dirb  http://testphp.vulnweb.com  /usr/share/wordlists/dirb/common.txt Dirbuster Dirbuster Now we’ll use Dirbuster — A GUI version of dirb to enumerate the directories. Go to the Application icon -> Web Application Analysis -> Web crawlers and Directory Bruteforce -> Dirbuster Now enter the target information and the wordlist file step wise as shown in the image below. After the information has been filled, click on Start button to st