Category Archives: enumeration

How to pass a list of extensions as a file to enumerate files/directories based on extension using gobuster? [closed]

Posted on by

I tried the below command using gobuster with the option ‘-x’ and tried to pass a list of extensions in a file:
gobuster dir -u TARGET_URI -w /usr/[…]/dirb/common.txt -x /usr/share/[…]/raft-small-extensions.txt

When I tried the above … Continue reading How to pass a list of extensions as a file to enumerate files/directories based on extension using gobuster? [closed]→

Exploitation Risks and Considerations specific to running internal DNS servers

Posted on by

I have heard of larger companies are utilizing their own internal DNS servers to route through internal resources. And was wondering if there is any specific exploitation risks and considerations for these, especially related to loss of av… Continue reading Exploitation Risks and Considerations specific to running internal DNS servers→

Is Reading Windows Reserved Filenames Through a URL Valid for OS Enumeration?

Posted on by

I’m aware that writing a file with a reserved name such as CON.txt or CON.mp3, aux.txt, lpt1.html, etc. is not allowed by Windows and can be leveraged for enumeration.
However, what about reading a file with a reserved name?
For example, i… Continue reading Is Reading Windows Reserved Filenames Through a URL Valid for OS Enumeration?→

What does a probe packet look like and how does it interact with a server to determine services [closed]

Posted on by

I have recently begun studying NMap. It offers a variety of options, each having clear advantages and disadvantages as to what information is disclosed and chance of being detected by possible layers of defense.
One of the options seems ra… Continue reading What does a probe packet look like and how does it interact with a server to determine services [closed]→