Skip to content

Latest commit

 

History

History
30 lines (18 loc) · 2.06 KB

working.md

File metadata and controls

30 lines (18 loc) · 2.06 KB

DIRECTORY FUZZING - Directory Fuzzing helps us discover hidden directories and folders on the web server. ffuf has found a directory called 'admin'.

image

FILE FUZZING - File fuzzing dives deeper into discovering specific files within those directories or in the web application's root.

image

image

PARAMETER AND VALUE FUZZING - This technique focuses on manipulating the parameters and their values within web requests to uncover vulnerabilities in how the application processes input. Here, accessID is a parameter with the value "fuzzing". GET parameters are like postcards – their information is visible to anyone who glances at the URL.

image

image

image

VHOST FUZZING - To scan for VHosts, without manually adding the entire wordlist to our /etc/hosts, we will be fuzzing HTTP headers, specifically the Host: header.

image

image

image

image

image

image

image

image