OS: Linux
Difficulty: Very Easy
When we find an open TCP port 80, it is worth enumerating the web server for hidden directories and files. These may expose useful endpoints such as /admin, login pages, configuration files, or other functionality that is not immediately visible from the main page.
One way to perform directory enumeration is with Gobuster.
'gobuster dir -u http:// -w -x '
Directory and file enumeration can reveal additional attack surface that is not linked or exposed directly from the main page.
Top comments (0)