Skip to content

Directory Fuzzing

TheGetch edited this page May 14, 2021 · 1 revision

When fuzzing for directories, follow these wordlists:

  1. dirsearch.txt *
  2. directory-list-2.3-medium.txt *
  3. httparchive_directories **
  4. Raft *
  5. RobotsDisallowed *

Then go for technology-specific.

Sources:

  1. * https://github.com/danielmiessler/SecLists/tree/master/Discovery/Web-Content
  2. ** https://wordlists.assetnote.io/

You can also try big.txt, content_discovery_all.txt by @Jhaddix, fuzz.txt by @i_bo0om.

_Sidebar

1. Recon

Ping Sweep

CIDR to IP

2. Enumeration

Services

05. HTTP (80,443,8080,8443,etc.)

3. Exploitation

4. Post Exploiation

5. High Value Information

Hashes

6. Reporting

7. Random Notes/Useful Tidbits

Clone this wiki locally