akde/infosec

Information security is ultimately about managing risk


See also the Web brute force post.

  1. Try to enu­mer­ate with a brute force tool like gob­uster.
    gobuster dir -u http://$target -w $wordlist
    • If you know a ver­sion struc­ture, you can add it by cre­at­ing a pat­tern file:
      pattern.txt:
      {GOBUSTER}/v1
      {GOBUSTER}/v2
    • gobuster dir -u http://$target -w $wordlist -p pattern.txt

Leave a Reply

About

Personal collection of some infosec stuff. Primary purpose of this site is to collect and organize for myself.

Note: Some content is not publicly visible due to copyright issues. Therefore, some links could be broken.

Checklists

Categories

Checklists: Ports

python -c 'import pty;pty.spawn("/bin/bash")';

python3 -c 'import pty;pty.spawn("/bin/bash")';