cheatsheet
  • Cheatsheet
  • General
  • NMAP
  • Directory and subdomain Enum
  • SMB and RPC
  • DNS
  • LDAP
  • mimikatz
  • Bloodhound
  • SQL Injection
  • password crack
  • Active Directory
  • Wordpress
  • SQLMAP
  • Gitea
  • DS_Store
  • IIS
  • Cypher Injection
  • MSSQL
  • BackDrop CMS
Powered by GitBook
On this page
  • Directory Enum
  • Dirsearch
  • Gobuster
  • Subdomain Enum
  • Wfuzz

Directory and subdomain Enum

Directory Enum

Dirsearch

dirsearch -u [URL] -x 403,404 -e php,html -w /path/to/wordlist

Gobuster

gobuster dir -u http://10.10.10.97/ -w /usr/share/seclists/Discovery/Web-Content/common.txt -x php

Subdomain Enum

Wfuzz

wfuzz -c -u http://alert.htb -H "Host: FUZZ.alert.htb" -w /usr/share/seclists/Discovery/DNS/shubs-subdomains.txt --hc 302,400,301

PreviousNMAPNextSMB and RPC

Last updated 4 months ago