web scanning - LearnHacking.io

Add .DS_Store to Your Wordlists (TFC CTF's "MacDonalds" challenge)

Nov 30, 2021 3 min read appsec

One of the CTF challenges from TFC CTF was called “MacDonalds”. This challenge essentially asks you to find a web directory–without using a scanner like dirb–given a few hints. There’s

How to Read a Robots.txt File

Nov 22, 2021 2 min read appsec

Most of us in security know robots.txt as a way to find files or directories that webmasters don’t want found by a search engine (and mistakenly think this means it’s

A Complete Guide to Web Enumeration with Dirb

Oct 26, 2021 5 min read enumeration

If you are doing a Hack The Box challenge, bug bounty, or a “real world” security assessment, you use Burp Suite or manually browse a website to find linked pages. But what about