search

joshhighet / bebop

reveal origins behind reverse proxies & hidden services 👀 🧅 💻
GNU General Public License v3.0
26 stars 5 forks source link

path fuzzing #6

Closed joshhighet closed 1 year ago

joshhighet commented 1 year ago

discover hidden paths through bruteforcing and other tricks.

see joshhighet/kerchow/sbin/http-scanner, gobuster & dirsearch

joshhighet commented 1 year ago

++ /phpinfo.php, /phpsysinfo/, /admin, /administrator, /wp-admin, /cpanel, /phpMyAdmin, /.git, /.env, /WEB-INF/web.xml, /config.php, /backup.sql, /backup.tar.gz, /wp-config.php.bak, /install.php, /readme.html, /CHANGELOG.txt, /LICENSE.txt, /api/v1/users, /api/v1/tokens, /api-docs, /test.php, /debug.php, /info.php, /uploads, /files, /media, /500.html