Nikto

This is an open source web scanner that looks for outdated versions, specific version problems, and other things

Syntax: nikto -host http://x.x.x.x
Through a proxy: nikto -host -useproxy http://<ip>:<port>

Gobuster

Gobuster is a command line tool that can brute force URI’s in websites. Gobuster is usually faster than Dirbuster, fwiw.

Syntax: gobuster dir -u http://x.x.x.x -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt

Through a Proxy: gobuster dir -u http://127.0.0.1 -p http://kalamari:ihateseafood@10.10.10.21:3128 -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -t 40

Common Kali Wordlist Locations

  • /usr/share/wordlists/
  • /usr/share/wordlists/dirbuster/
  • /usr/share/wordlists/dirb/

Dirbuster

Wfuzz

Wfuzz is a tool for bruteforcing web applications. Documentation is available here: https://wfuzz.readthedocs.io/en/latest/

Syntax: wfuzz -c -w <wordlist> <http://x.x.x.x/FUZZ>

wfuzz -w /usr/share/wordlists/dirbuster/directory-list-lowercase-2.3-small.txt -z list,-.pdf –hc 404,403 https://intra.redcross.htb/documentation/FUZZFUZ2Z

  • -c = output with colors
  • You need to specify the word FUZZ where you want the wordlist to hit in the URL.

DirSearch

https://github.com/maurosoria/dirsearch

python3 dirsearch.py -u http://<IP address> -e php,html -x 400,401,403

WebDAV / davtest

WebDAV is an extension of HTTP that allows clients to perform remove Web content authoring. If you see it on a target, you can use a tool called davtest to try to enumerate.

Syntax: /usr/bin/davtest -url http://x.x.x.x

84 thoughts on “HTTP Enumeration”

  2. Attractive section of content. I just stumbled upon your weblog and in accession capital to assert that I acquire actually enjoyed account your blog posts. Any way I will be subscribing to your augment and even I achievement you access consistently quickly.

  5. Este site é realmente fabuloso. Sempre que acesso eu encontro coisas incríveis Você também vai querer acessar o nosso site e descobrir mais detalhes! conteúdo único. Venha descobrir mais agora! 🙂

  6. amei este site. Pra saber mais detalhes acesse nosso site e descubra mais. Todas as informações contidas são conteúdos relevantes e diferentes. Tudo que você precisa saber está ta lá.

  7. My brother recommended I might like this website. He was entirely right. This post actually made my day. You cann’t imagine just how much time I had spent for this info! Thanks!

  8. Your style is so unique compared to many other people. Thank you for publishing when you have the opportunity,Guess I will just make this bookmarked.2

  10. Wow that was strange. I just wrote an incredibly long comment but after I clicked submit my comment didn’t show up. Grrrr… well I’m not writing all that over again. Regardless, just wanted to say excellent blog!

  12. I do enjoy the manner in which you have framed this difficulty and it really does present me personally a lot of fodder for thought. On the other hand, through what precisely I have seen, I simply just wish when the actual feedback pack on that individuals stay on issue and don’t embark upon a soap box of some other news of the day. Still, thank you for this superb point and whilst I can not necessarily agree with it in totality, I value your point of view.

  19. Admiring the commitment you put into your website and detailed information you offer. It’s awesome to come across a blog every once in a while that isn’t the same out of date rehashed material. Excellent read! I’ve saved your site and I’m including your RSS feeds to my Google account.

  26. I’m curious to find out what blog system you happen to be using? I’m experiencing some small security issues with my latest site and I would like to find something more safeguarded. Do you have any solutions?

  27. You really make it appear so easy together with your presentation but I to find this topic to be really something that I feel I might by no means understand. It kind of feels too complex and very huge for me. I am looking ahead on your next publish, I will attempt to get the grasp of it!

  28. Hello, i believe that i saw you visited my site so i got here to “return the choose”.I’m trying to in finding issues to improve my website!I suppose its adequate to use a few of your ideas!!

  31. I’m really inspired along with your writing talents and also with the structure in your weblog. Is this a paid topic or did you modify it your self? Either way keep up the nice high quality writing, it’s uncommon to peer a great weblog like this one nowadays..

  32. I am very happy to read this. This is the type of manual that needs to be given and not the random misinformation that is at the other blogs. Appreciate your sharing this best doc.

  33. Thanks for some other magnificent article. Where else may just anyone get that kind of information in such an ideal way of writing? I’ve a presentation subsequent week, and I am on the look for such information.

  34. Definitely consider that which you stated. Your favorite reason seemed to be on the net the easiest thing to take into account of. I say to you, I definitely get annoyed while folks think about issues that they just don’t realize about. You managed to hit the nail upon the highest and outlined out the entire thing without having side-effects , other folks can take a signal. Will probably be back to get more. Thank you

  36. Good blog! I really love how it is easy on my eyes and the data are well written. I am wondering how I might be notified whenever a new post has been made. I have subscribed to your feed which must do the trick! Have a great day!

  39. Howdy just wanted to give you a brief heads up and let you know a few of the images aren’t loading correctly. I’m not sure why but I think its a linking issue. I’ve tried it in two different web browsers and both show the same results.

  40. The root of your writing whilst appearing agreeable originally, did not really settle very well with me personally after some time. Somewhere within the paragraphs you were able to make me a believer unfortunately just for a short while. I nevertheless have a problem with your leaps in logic and you would do nicely to fill in those gaps. In the event that you actually can accomplish that, I would surely end up being fascinated.

  42. Hi my friend! I wish to say that this article is awesome, nice written and include almost all significant infos. I would like to see more posts like this.

  53. Plus besoin de faire la queue : votre ordonnance est prete en 2 minutes. Large choix de medicaments, parapharmacie et produits bio. Livraison offerte des 49 € d’achat. Prenez soin de vous facilement avec PharmaDirect.ascorbic-acid

  55. FanDuel Casino is America’s #1 online casino, delivering non-stop thrills with ignition casino blackjack , exclusive slots like Huff N’ Huff, and last affairs force normal at your fingertips. Hip players get 500 Extra Spins together with $40 in Casino Compensation just for depositing $10—plus up to $1,000 fail on first-day screen losses. Province all Thrillionaires: accompany for the nonce, play your way, and upon every blink into epic wins!

  57. Betano Casino https://betanogame.org/ – home of massive jackpots. Claim your €500 welcome bonus today and explore thousands of exciting titles. Live casino, sports betting and more await you. Become a legend with every bet.

  65. Thank you for another magnificent article. Where else could anybody get that kind of information in such an ideal way of writing? I’ve a presentation next week, and I’m on the look for such information.

  67. slot365 vip có đội ngũ phát triển game trong nước – thường xuyên lắng nghe góp ý từ người chơi Việt để tối ưu trải nghiệm phù hợp với thị hiếu địa phương. TONY03-27O

  68. I like how this article encourages reflection. It made me think about how small personal habits influence confidence, especially in areas like grooming and personal care. Taking care of hair, following a skincare routine, keeping up with shaving, and getting a regular haircut at the salon are simple ways people show their own version of beauty.

  70. I feel that is one of the most important info for me. And i am satisfied studying your article. But should remark on some general issues, The web site style is ideal, the articles is in point of fact excellent :D. Just right process, cheers

  71. Đội ngũ hỗ trợ khách hàng tại 888slot apk được đào tạo chuyên sâu, sẵn sàng lắng nghe và giải đáp mọi thắc mắc của quý khách với thái độ lịch sự và chuyên nghiệp nhất. TONY04-17

  75. Hi there! I just wanted to ask if you ever have any trouble with hackers? My last blog (wordpress) was hacked and I ended up losing many months of hard work due to no backup. Do you have any methods to prevent hackers?

  83. Giao diện website 66B được thiết kế theo phong cách tối giản nhưng sang trọng, tập trung vào trải nghiệm người dùng với bố cục khoa học và dễ thao tác. TONY05-09

Leave a Reply

Your email address will not be published. Required fields are marked *