Introduction to Web and HTTP Protocol

Tools

• gobuster dir -u <url> -w <wordlist> -b 403,404 (silenced) -x .php, .xml, .txt (filetypes)

• burpsuite

• Zaproxy

• nikto -h <url>

• sqlmap

• xsser --url <url> -p <payload with xss> --Fp <custom script> --cookie="<cookie>"

• hydra -L <user> -P <password> <ip/url> http-post-form "/login.php:login=^USER^&passsword=^PASS^&security_level=0&form=submit:<ErrorMessage>"