Bharath Narayanasamy

Threat Intelligence Tools – URLScan.io

Urlscan.io is a free service developed to assist in scanning and analysing websites. It is used to automate the process of browsing and crawling through websites to record activities and interactions.…

Bharath Narayanasamy

Threat Intelligence Threat Hunting

Threat Intelligence

Threat Intelligence Foundation: Threat Intelligence is the analysis of data and information using tools and techniques to generate meaningful patterns on how to mitigate against potential risks associated with existing…

Bharath Narayanasamy

WebPentest

Attacking CMS – WordPress

Bharath Narayanasamy

WebPentest

Attacking CMS – Drupal

Bharath Narayanasamy

WebPentest

Attacking CMS – Joomla

Bharath Narayanasamy

PenTest

PenTest 101 – Cheat Sheet

CommandDescriptionsudo nano /etc/hostsOpens the /etc/hosts with nano to start adding hostnamessudo nmap -p 80,443,8000,8080,8180,8888,10000 --open -oA web_discovery -iL scope_listRuns an nmap scan using common web application ports based on a scope list (scope_list)…

Bharath Narayanasamy

Enumeration WebPentest

Gobuster Cheat Sheet

Common Gobuster Commands dir Mode gobuster dir -u https://nlabs.local -w ~/wordlists/shortlist.txt With content length gobuster dir -u https://nlabs.local -w ~/wordlists/shortlist.txt -l dns Mode gobuster dns -d nlabs.local -t 50 -w…

Bharath Narayanasamy

WebPentest Web Enumeration

Complete Guide on ffuf

In web application penetration testing, entry points are areas of an application where a user can input data or interact with the system, which an attacker could potentially exploit. Identifying…

Bharath Narayanasamy

ZyberAttacks

Punycode attacks

Bharath Narayanasamy

Enumeration WebPentest

Fuff – Cheat Sheet

Ffuf commands CommandDescriptionffuf -hffuf helpffuf -w wordlist.txt:FUZZ -u http://SERVER_IP:PORT/FUZZDirectory Fuzzingffuf -w wordlist.txt:FUZZ -u http://SERVER_IP:PORT/indexFUZZExtension Fuzzingffuf -w wordlist.txt:FUZZ -u http://SERVER_IP:PORT/blog/FUZZ.phpPage Fuzzingffuf -w wordlist.txt:FUZZ -u http://SERVER_IP:PORT/FUZZ -recursion -recursion-depth 1 -e .php -vRecursive…

Bharath Narayanasamy