Website Web Directory Brute Forcing Fuzzing Tools and Techniques Wordlist Strategies

Directory Brute Forcing Techniques:  Dirsearch is a simple command line tool designed to brute force directories and files in websites. This tool is available at GitHub you can download it from here and after installation in your Kali Linux type following to start dirsearch. dirsearch /opt/dirsearch/ -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -u http://TARGETIP -e php -t 20 # Dirb dirb … Read more

WackoPicko Pen Testing Tool Web App is a website that contains known vulnerabilities

WackoPicko is a website that contains known vulnerabilities. It was first used for the paper Why Johnny Can’t Pentest: An Analysis of Black-box Web Vulnerability Scanners Docker Image I recently created a wackopicko docker image, which is just about the easiest way to run wackopicko. Simply run the following, which will map your local port 8080 to the port 80 in … Read more