> For the complete documentation index, see [llms.txt](https://d4redevil.gitbook.io/d4redevil/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://d4redevil.gitbook.io/d4redevil/cheatsheet/enumeracion-web.md). # Enumeración Web ### Gobuster Fuzzing de directorios ```bash gobuster dir -u -w ``` Ejemplo: ```bash gobuster dir -u http://192.168.1.10/ -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -t 20 ``` Fuzzing a través de proxychains ```bash gobuster dir -u http://10.10.10.4/ -w /usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-2.3-medium.txt -t 50 -x html,php,txt --proxy socks5://127.0.0.1:4444 ``` ### Fuff Fuzzing de directorios ```bash ffuf -c -u /FUZZ -w -t 20 ``` Ejemplo: ```bash ffuf -u http://192.168.1.10/FUZZ -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -t 20 ``` Fuzzing a través de proxychains ```bash ffuf -c -recursion-depth 2 -x socks5://localhost:4444 -u http://20.20.20.10/FUZZ -w /usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-2.3-medium.txt -e .php ``` Fuzzing de subdominios ``` ffuf -u http://192.168.1.10/ -H 'Host: FUZZ.domain.thl' -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -t 20 ``` ### Dirb ```bash dirb ``` Ejemplo: ```bash dir http://192.168.1.10/ /usr/share/wordlists/dirb/common.txt ``` ### Wfuzz ```bash wfuzz -c -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-110000.txt -H 'Host: FUZZ.target.com' --hw 324 http://target ``` ### Nikto ```bash nikto -h http://192.168.1.10/ ```