Information Gathering : Web Application

on

Below mentioned tools and tricks can be used to gather target URL's information. Some of these tools are available in Kali Linux OS.

  1. Host
  2. Ping
  3. whois
  4. fierce --dns << url >>
  5. theharvester
  6. whatweb <<url>>
  7. Fuff *
  8. dirb <<url>>, by default it chooses common.txt wordlist
  9. Use burp to crawl the URL.
  10. Google hack/dork:-
    1. Go to settings >> advanced settings
    2. Query language - inurl, allinurl, intext, allintext, intitle, allintitle, site, source,filetype, related, define, “”, - , _, *, (), AND, OR, #..#
      1. Example : - 
        1. site: << >>
        2. site: << >> AND (inurl:login) 
  11. Password list creation: -
    1. crunch - tool is available in kali
      1. eg : -crunch 4 4 aB1. 
      2. Where crunch is command , 4 is minimum and next 4 is maximum, aB1. Is pattern
  12. Check HTTP or HTTPS - 
    1. use wireshark tool

Comments

Post a Comment