Star

Reconnaissance

Enumerating web resources

# Web fuzzer 
ffuf -c -u https://example.com/file-FUZZ -w wordlist.txt

# with extension
ffuf -c -u https://example.com/FUZZ -w wordlist.txt -e .php,.html,.txt

# with more placeholder
ffuf -c -u http://example.com/FUZZ/FILE -w wordlist.txt:FUZZ -w wordlist2.txt:FILE 


# Recursive content discovery
# You can set depth (recursion), extract links from response body
feroxbuster -u https://example.com -x html,php,js,txt,pdf,json

# Fetch all the URLs that the Wayback Machine knows about for a domain
waybackurls https://example.com

Wordlists

Full path

onelistforallmicro.txt (18.109 lines)

onelistforallshort.txt (892.361 lines)

Directory/file

directory-list-2.3-medium.txt (220.560 lines)

Vulnerability scanner

nikto -h http://example.com

Technology Identification

Use Wappalyzer extension.