Nikto

This is an open source web scanner that looks for outdated versions, specific version problems, and other things

Syntax: nikto -host http://x.x.x.x
Through a proxy: nikto -host -useproxy http://<ip>:<port>

Gobuster

Gobuster is a command line tool that can brute force URI’s in websites. Gobuster is usually faster than Dirbuster, fwiw.

Syntax: gobuster dir -u http://x.x.x.x -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt

Through a Proxy: gobuster dir -u http://127.0.0.1 -p http://kalamari:ihateseafood@10.10.10.21:3128 -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -t 40

Common Kali Wordlist Locations

  • /usr/share/wordlists/
  • /usr/share/wordlists/dirbuster/
  • /usr/share/wordlists/dirb/

Dirbuster

Wfuzz

Wfuzz is a tool for bruteforcing web applications. Documentation is available here: https://wfuzz.readthedocs.io/en/latest/

Syntax: wfuzz -c -w <wordlist> <http://x.x.x.x/FUZZ>

wfuzz -w /usr/share/wordlists/dirbuster/directory-list-lowercase-2.3-small.txt -z list,-.pdf –hc 404,403 https://intra.redcross.htb/documentation/FUZZFUZ2Z

  • -c = output with colors
  • You need to specify the word FUZZ where you want the wordlist to hit in the URL.

DirSearch

https://github.com/maurosoria/dirsearch

python3 dirsearch.py -u http://<IP address> -e php,html -x 400,401,403

WebDAV / davtest

WebDAV is an extension of HTTP that allows clients to perform remove Web content authoring. If you see it on a target, you can use a tool called davtest to try to enumerate.

Syntax: /usr/bin/davtest -url http://x.x.x.x

41 thoughts on “HTTP Enumeration”

  1. Attractive section of content. I just stumbled upon your weblog and in accession capital to assert that I acquire actually enjoyed account your blog posts. Any way I will be subscribing to your augment and even I achievement you access consistently quickly.

  2. Este site é realmente fabuloso. Sempre que acesso eu encontro coisas incríveis Você também vai querer acessar o nosso site e descobrir mais detalhes! conteúdo único. Venha descobrir mais agora! ๐Ÿ™‚

  3. amei este site. Pra saber mais detalhes acesse nosso site e descubra mais. Todas as informações contidas são conteúdos relevantes e diferentes. Tudo que você precisa saber está ta lá.

  4. My brother recommended I might like this website. He was entirely right. This post actually made my day. You cann’t imagine just how much time I had spent for this info! Thanks!

  5. Your style is so unique compared to many other people. Thank you for publishing when you have the opportunity,Guess I will just make this bookmarked.2

  6. Wow that was strange. I just wrote an incredibly long comment but after I clicked submit my comment didn’t show up. Grrrr… well I’m not writing all that over again. Regardless, just wanted to say excellent blog!

  7. I do enjoy the manner in which you have framed this difficulty and it really does present me personally a lot of fodder for thought. On the other hand, through what precisely I have seen, I simply just wish when the actual feedback pack on that individuals stay on issue and don’t embark upon a soap box of some other news of the day. Still, thank you for this superb point and whilst I can not necessarily agree with it in totality, I value your point of view.

  8. Admiring the commitment you put into your website and detailed information you offer. It’s awesome to come across a blog every once in a while that isn’t the same out of date rehashed material. Excellent read! I’ve saved your site and I’m including your RSS feeds to my Google account.

  9. I’m curious to find out what blog system you happen to be using? I’m experiencing some small security issues with my latest site and I would like to find something more safeguarded. Do you have any solutions?

  10. You really make it appear so easy together with your presentation but I to find this topic to be really something that I feel I might by no means understand. It kind of feels too complex and very huge for me. I am looking ahead on your next publish, I will attempt to get the grasp of it!

  11. Hello, i believe that i saw you visited my site so i got here to โ€œreturn the chooseโ€.I’m trying to in finding issues to improve my website!I suppose its adequate to use a few of your ideas!!

  12. I’m really inspired along with your writing talents and also with the structure in your weblog. Is this a paid topic or did you modify it your self? Either way keep up the nice high quality writing, itโ€™s uncommon to peer a great weblog like this one nowadays..

  13. I am very happy to read this. This is the type of manual that needs to be given and not the random misinformation that is at the other blogs. Appreciate your sharing this best doc.

  14. Thanks for some other magnificent article. Where else may just anyone get that kind of information in such an ideal way of writing? I’ve a presentation subsequent week, and I am on the look for such information.

  15. Definitely consider that which you stated. Your favorite reason seemed to be on the net the easiest thing to take into account of. I say to you, I definitely get annoyed while folks think about issues that they just don’t realize about. You managed to hit the nail upon the highest and outlined out the entire thing without having side-effects , other folks can take a signal. Will probably be back to get more. Thank you

  16. Good blog! I really love how it is easy on my eyes and the data are well written. I am wondering how I might be notified whenever a new post has been made. I have subscribed to your feed which must do the trick! Have a great day!

  17. Howdy just wanted to give you a brief heads up and let you know a few of the images aren’t loading correctly. I’m not sure why but I think its a linking issue. I’ve tried it in two different web browsers and both show the same results.

  18. The root of your writing whilst appearing agreeable originally, did not really settle very well with me personally after some time. Somewhere within the paragraphs you were able to make me a believer unfortunately just for a short while. I nevertheless have a problem with your leaps in logic and you would do nicely to fill in those gaps. In the event that you actually can accomplish that, I would surely end up being fascinated.

Leave a Reply

Your email address will not be published. Required fields are marked *