githubEdit

directory-and-page-fuzzing

Directory enumeration

ffuf -u http://"$domain"/FUZZ  -w /usr/share/wordlists/seclists/discovery/web-content/common.txt

Directory Fuzzing (recursive)

ffuf -w /usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-2.3-medium.txt -u http://"$ip":80/FUZZ -recursion -recursion-depth 2 -e .php -ic -v

Extensions

feroxbuster --url "$ip" -x list,md,txt,conf,config,bak,backup,swp,old,db,sql,asp,aspx,aspx,~asp~,py,py~,rb,rb~,php,php~,bak,bkp,cache,cgi,conf,csv,html,inc,jar,js,json,jsp,jsp~,lock,log,rar,old,sql,sql.gz,sql.zip,sql.tar.gz,sql~,swp,swp~,tar,tar.bz2,tar.gz,txt,wadl,zip,.log,.xml,.js,.json -C 404 -S 0 -t 210

Extension fuzzing (index page fuzzing)

ffuf -w /usr/share/seclists/Discovery/Web-Content/web-extensions.txt -u http://"$domain"/indexFUZZ

Last updated