Web Enumeration

Web Technologies

whatweb <url> [-a <level>]

Apps - Wappalyzer

I also recommend using this browser extension.

File and Directory Enumeration

nmap -p80,443 --script http-enum <target_ip>

gobuster dir -u <url> -w <wordlist>

wfuzz <url>/FUZZ -w <wordlist>

# Good option for BurpSuite requests
ffuf <url> -request request.txt -w <wordlist>

Subdomain Enumeration

gobuster vhost -u <url> -w <wordlist>

wfuzz <url> -H 'Host: FUZZ.<domain>' -w <wordlist>