diff --git a/README.md b/README.md index d3b09ab..f0eef52 100644 --- a/README.md +++ b/README.md @@ -1,4 +1,3 @@ - *** # Offensive Security Tools @@ -77,6 +76,10 @@ nmap -F {RHOST} # Ping sweep subnet nmap -sP {RHOST}/24 +# +sudo nmap -sN {RHOST}/24 +sudo nmap -sS -T4 -sC -A {RHOST} -oA box + # Usage nmap -p- --min-rate 5000 -sC -sV {RHOST} @@ -286,6 +289,22 @@ tftp {IP ADDRESS} ```bash # Directory Enumeration + +wfuzz -w /usr/share/dirbuster/wordlists/directory-list-2.3-medium.txt --hc 404 http://{RHOST}/FUZZ + + +┌──(kali㉿kali)-[~] +└─$ locate /usr/share/dirbuster/wordlists/ +/usr/share/dirbuster/wordlists/apache-user-enum-1.0.txt +/usr/share/dirbuster/wordlists/apache-user-enum-2.0.txt +/usr/share/dirbuster/wordlists/directories.jbrofuzz +/usr/share/dirbuster/wordlists/directory-list-1.0.txt +/usr/share/dirbuster/wordlists/directory-list-2.3-medium.txt +/usr/share/dirbuster/wordlists/directory-list-2.3-small.txt +/usr/share/dirbuster/wordlists/directory-list-lowercase-2.3-medium.txt +/usr/share/dirbuster/wordlists/directory-list-lowercase-2.3-small.txt + + gobuster dir -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -u http://{RHOST} ffuf -ic -w /usr/share/seclists/Discovery/Web-Content/common.txt -c -u "http://{RHOST}/FUZZ" ffuf -ic -w /usr/share/seclists/Discovery/Web-Content/directory-list-2.3-medium.txt -c -u "http://{RHOST}/FUZZ"