WEB TECHNOLOGIES

PRIMARY CATEGORY → WEB PENTESTING

Enumeration

Scanning for HTTP-related Ports

nmap -p80,443,8000,8080,8180,8443,8888,10000 --open -sS --min-rate 5000 -v -n -Pn --disable-arp-ping -oA scan.HTTPports -iL hosts.list

Generating a Web Report

EyeWitness

EyeWitness

• Setup

git clone https://github.com/RedSiege/EyeWitness EyeWitness
cd !$/setup && ./setup.sh
cd .. && . eyewitness-venv/bin/activate

• Usage

We can pass as input the Nmap’s XML web report as follows

python3 Python/EyeWitness.py --web -x <NMAP_XML_FILE> -d <OUTPUT_DIR>

Aquatone

Aquatone

• Setup

curl --silent --location --request GET "https://github.com/michenriksen/aquatone/releases/download/v1.7.0/aquatone_linux_amd64_1.7.0.zip" --output aquatone.zip
unzip !$ -d Aquatone

• Usage

cd !$ && cat <nmap_xml_file> | ./aquatone -nmap

---

CMS ⟡

• 
  • WORDPRESS
• 
  • JOOMLA
• 
  • DRUPAL

---

Application Servers ⟡

• 
  • TOMCAT
• 
  • IIS

---

Software Development Tools ⟡

• 
  • JENKINS

---

SIEM ⟡

• 
  • SPLUNK

---

Monitoring Software ⟡

• 
  • PANDORA FMS
• 
  • PRTG

---

Software Config. Management ⟡

• 
  • GITLAB

---

Customer Service Management ⟡

• 
  • OSTICKET

---

CGI ⟡

Common Gateway Interface

• 
  • CGI

---

Thick Client Applications ⟡

• 
  • THICK CLIENT APPS

---

Miscellaneous ⟡

• 
  • COLDFUSION

---

Web Frameworks ⟡

• 
  • LARAVEL