80
Last updated
Was this helpful?
Last updated
Was this helpful?
❯ echo 10.10.11.58 dog.htb | sudo tee -a /etc/hosts
[sudo] password for adot:
10.10.11.58 dog.htb
❯ ffuf -w ~/opt/wordlists/web-extensions.txt -u http://10.10.11.58/indexFUZZ
/'___\ /'___\ /'___\
/\ \__/ /\ \__/ __ __ /\ \__/
\ \ ,__\\ \ ,__\/\ \/\ \ \ \ ,__\
\ \ \_/ \ \ \_/\ \ \_\ \ \ \ \_/
\ \_\ \ \_\ \ \____/ \ \_\
\/_/ \/_/ \/___/ \/_/
v2.1.0-dev
________________________________________________
:: Method : GET
:: URL : http://10.10.11.58/indexFUZZ
:: Wordlist : FUZZ: /home/adot/opt/wordlists/web-extensions.txt
:: Follow redirects : false
:: Calibration : false
:: Timeout : 10
:: Threads : 40
:: Matcher : Response status: 200-299,301,302,307,401,403,405,500
________________________________________________
.phps [Status: 403, Size: 276, Words: 20, Lines: 10, Duration: 4616ms]
.php [Status: 200, Size: 13332, Words: 1368, Lines: 202, Duration: 4659ms]
:: Progress: [41/41] :: Job [1/1] :: 8 req/sec :: Duration: [0:00:04] :: Errors: 0 ::
❯ git-dumper http://10.10.11.58/.git website
[-] Testing http://10.10.11.58/.git/HEAD [200]
[-] Testing http://10.10.11.58/.git/ [200]
[-] Fetching .git recursively
[-] Fetching http://10.10.11.58/.git/ [200]
[-] Fetching http://10.10.11.58/.gitignore [404]
[-] http://10.10.11.58/.gitignore responded with status code 404
[-] Fetching http://10.10.11.58/.git/logs/ [200]
[-] Fetching http://10.10.11.58/.git/hooks/ [200]
[-] Fetching http://10.10.11.58/.git/refs/ [200]
[-] Fetching http://10.10.11.58/.git/HEAD [200]
[-] Fetching http://10.10.11.58/.git/branches/ [200]
[-] Fetching http://10.10.11.58/.git/COMMIT_EDITMSG [200]
[-] Fetching http://10.10.11.58/.git/info/ [200]
[-] Fetching http://10.10.11.58/.git/logs/HEAD [200]
[-] Fetching http://10.10.11.58/.git/logs/refs/ [200]
[-] Fetching http://10.10.11.58/.git/hooks/commit-msg.sample [200]
[-] Fetching http://10.10.11.58/.git/hooks/applypatch-msg.sample [200]
[-] Fetching http://10.10.11.58/.git/hooks/fsmonitor-watchman.sample [200]
[-] Fetching http://10.10.11.58/.git/hooks/post-update.sample [200]
[-] Fetching http://10.10.11.58/.git/hooks/pre-commit.sample [200]
<SNIP>