⚔️
DWSec Wiki
  • Welcome to the DWSec Notes
  • Windows Privilege Escalation
  • Active Directory
    • Fundamentals
      • Introduction
      • Protocols
      • Authentication
      • Glossary of terms
      • Objects
      • AD CS
    • Pentest Methodology
    • Insecure Logins
    • Bloodhound & ldapdomaindump
    • NTLMRelaying (445)
    • SMB Coercing (445)
    • Pre2k
    • DACL Abuse
    • Kerberoasting
    • Utility Tools
    • Powershell
  • Networking
    • Fundamentals
    • Pivoting, Tunneling and Portforwarding
    • DNS
    • Ligolo-ng
    • Toolbox
    • Protocols
      • 80/443 - HTTP/HTTPS
      • 389 - LDAP
      • 445 - SMB
  • Web
    • Active Enumeration
    • Passive Enumeration
  • ADPwn
  • Tools
    • Tools overview
Powered by GitBook
On this page
  • Directory Enumeration
  • DNS Enumeration
  • VHOST Enumeration
  • File Exploration

Was this helpful?

  1. Web

Active Enumeration

Directory Enumeration

Quick pre enumeration: 

feroxbuster --url <URL> -w /usr/share/seclists/Discovery/Web-Content/quickhits.txt  -o ferox-dir-enum
 -o web-directories.txt

Detailed enumeration:

feroxbuster --url <URL> -w /usr/share/seclists/Discovery/Web-Content/directory-list-2.3-big.txt -o web-directories.txt

DNS Enumeration

gobuster dns -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-110000.txt -d <DOMAIN> -o web-subdomains.txt --timeout 10s

VHOST Enumeration

ffuf -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-110000.txt -u <URL> -H "Host: FUZZ.<DOMAIN>" -o web-vhosts.txt -fc 302 -fs <SIZE_200_RESPONSE>

File Exploration

// Some code
Previous445 - SMBNextPassive Enumeration

Last updated 4 months ago

Was this helpful?