Udemy
    •  
    •  
    •  
    •  
    •  
    •  
    •  
    •  
Subscribe
Turn what you know into an opportunity and reach millions around the world.
Learn More
Your cart is empty.
Keep shopping
Ethical Hacking: Web Enumeration
Rating: 4.3 out of 5(456 ratings)
38,660 students

Ethical Hacking: Web Enumeration

Scan your target before hacking
Created byPeter A
Last updated 7/2022
English

What you'll learn

  • Manual Scanning
  • Scanning website for hidden directories
  • Scanning website for hidden files
  • Scanning for hidden subdomains
  • Scanning WordPress blogs
  • Scanning Servers

Course content

1 section • 8 lectures • 41m total length

  • Introduction3:25

    Master the essential web enumeration tools to reveal hidden files and directories on a web target, using Kali Linux and setup options from live USB to virtual machines.

  • Manual Scanning3:06

    Perform manual enumeration to assess web security using a local network server, a word list, and browser developer tools to reveal exposed information.

  • Wordlists1:50

    Learn to use built-in word lists in Kali for automated web scans, including DirBuster lists like common and small extensions. Access these directories and install more with apt.

  • Gobuster dir scan7:43

    Use Go Buster to automatically scan website directories with a word list, revealing exposed paths such as /documents, /admin, and secrets.

  • Gobuster file scan4:03

    Learn how Gobuster performs a directory scan with a word list, then searches documents, admin, and secret directories for files using extensions, with -x and -k to bypass cert errors.

  • Gobuster DNS scan5:11

    Explore gobuster in DNS mode to enumerate subdomains using domain word lists. Install and use additional word lists like checklists on Kali Linux to enhance discovery.

  • WPScan9:43

    Learn to use WPScan to enumerate WordPress installations, identify themes, plugins, usernames, and vulnerabilities, update its database, and perform password attacks with wordlists for security testing.

  • Nikto6:06

    Nikto is a free, open source, general web vulnerability scanner that searches for misconfigurations, outdated services, and sensitive files across multiple ports, with plugins, reporting options, and targeted tuning.

Requirements

  • No prior experience required

Description

web enumeration is a techniques hackers use when targeting web servers and web sites. When attempting to hack an application with a vulnerabilty, you first have to find out what files, subdomains or directories the applications are vulnerable to. On top of that, you may find hidden files that could give you access to the file server. Perhaps you can access SSH keys, pdfs or find hidden directories. It might be there is a vulnerable app running on one of the sub domains. There are many ways the server could be accessible and web enumeration is the first step.

In this course you will learn how to scan for directories, files, subdomains but also how to scan blogs made with wordpress for vulnerabilities. While you can do manual scanning, that quickly becomes cumbersome. In this course we explain how you can do automated scans on your target server.

This is a beginners course for those interested in Ethical Hacking or Cyber Security. You don't need any prior knowledge when doing this course, but you should have Kali Linux at hands. Kali Linux is a computer system that contains many hacking tools, sometimes it's simply called Kali. It can be downloaded for free as a Live USB or Virtualbox image, there's also a cloud option. While you can install the tools manually, there are so many hacking tools that it's easier to use a dedicated Linux system like Kali.





Who this course is for:

  • Beginner Ethical Hackers
  • Software Developers
  • Sysadmins
  • Devops

Report abuse