Skip to main content

Hussein D Talk Series

Port scanning, deep port scanning

Subdomain recon of deeper domains like xxxx.admin.andela.com

http://bounty.offensiveai.com/

Facebook cert

crtys

ffuf to scan for WORD.admin.example.com

Fuff -u http://fuzz.sub.domain.com -w wordlist

Suip.biz subdomain

Angry ip scanner

Scan from this ip to this ip with this port

First crawling the website and see all the requests, Blind SQL Injections

Dumper Script sQL Map, (aTlas GitHub)

Internet Marketing Ninja(crawler)

Fofa.so

Arjun or PAraminers Change json to xml, tamper with it

Change get request to POST,

LFI, Links input, file input, image inputs

#!bin/bash

cd Sublist3r && python sublist3r.py -d example.com

’s/ substitute

\w* remove the first line

. Remove the space

// nothing

$ at the end of the line

’s/[404].//

Bash

Cut http and https from urls sed 's/https\?:\/\///' packet_write_wait: Connection to 64.225.114.42 port 22: Broken pipe

sed 's/https\?:\/\///' |tr -d "[,0-9]"

cat no404s.txt | sed 's/https\?:\/\///' |tr -d "[,0-9]" > cleanno404.txt

cat no404s.txt | sed 's/https\?:\/\///' |tr -d "[,0-9]" > cleanno404.txt

Look at javascript files always

phpinfo path

Apache default path

Active+++


Comments