CyberNotes
Web Applications/Enumeration

Directories

Commonly used ways of finding directories on a given domain.

Dirbuster

$ dirbuster
  • Built in GUI
  • Set target ip
  • Turn up threads! (200-999)
  • List-based : Find Wordlist

Dirb

$ dirb http://10.10.129.69/ /usr/share/wordlists/SecLists/Discovery/Web-Content/common.txt
  • Usually slower

GoBuster

$ gobuster dir --url http://10.10.129.69/ -w /usr/share/wordlists/SecLists/Discovery/Web-Content/common.txt

Feroxbuster

$ feroxbuster --url http://10.10.129.69/ --wordlist /usr/share/wordlists/SecLists/Discovery/Web-Content/common.txt
  • Fastest

Cross Site Scripting

XSS

Enumerating Emails

A python script to enumerate emails

On this page