3. Web Directory Listing, Crawling with dirsearch, ffuf, and gobuster - Using HTB Hospital
Not a write-up. Using an active machine so that anyone can practice for free.
Web enumeration
00:01:20 nmap
00:02:15 Installing Obsidian
00:06:37 Updating /etc/hosts
00:09:20
1. Directory enum -- Directory crawling
1. dirsearch
2. ffuf
1. ffuf -u http://hospital.htb:8080/FUZZ -w /usr/share/wordlists/dirb/small.txt -v
2. ffuf -u http://hospital.htb:8080/FUZZ -w /usr/share/wordlists/dirb/small.txt -v -x http://127.0.0.1:808
1. Sending data to burp
3. gobuster
Other resources
https://github.com/danielmiessler/Sec...
https://book.hacktricks.xyz/network-s...
https://portswigger.net/kb/issues/006...
Web directory listing/crawling process
1. Identify directories
2. Identify file extensions
3. keep doing.