🌐Reconocimiento

Enumeración de Dominio Web

FFUF

Directory enum

ffuf  -u <http://web.com/FUZZ> -w <wordlist> -o <file>

Subdomain enum

ffuf -w <wordlist> -H "Host: FUZZ.web.com" -u http://web.com -fs <size>

Parameter enum

ffuf -w <wordlist> -u http://web.com/script.php?FUZZ=test -fs <size>

Values enum

ffuf -w <wordlist> -u http://web.com/script.php?parameter=FUZZ -fc <code>

GoBuster

Juicy endpoints

Jenkins

/var/lib/jenkins/config.xml
/var/lib/jenkins/users/users.xml
/var/lib/jenkins/users/user/conf.xml

/manage/script # revshell

Apache

Domain Zone Transfer (AXFR)

dig @<IP> <domain-name> axfr