From the course: Kali Linux Essential Training

Unlock the full course today

Join today to access over 24,900 courses taught by industry experts.

Busting open a website

Busting open a website

- [Narrator] Sometimes there are pages on a website, which aren't linked to the main webpage. For these, we need to know the URL to use to access them. Alternatively, we can go hunting for them using a test tool and a dictionary file of commonly used directory names. There are three test tools often used to search for pages on a website, DIRB, DirBuster and Gobuster. We'll take a look at the simplest of these, DIRB. We can select this from the Applications menu, but we can also just use it directly on the command line. If we just enter DIRB, we get the help page and some examples. Let's have a look at the Mutillidae website on Metasploitable to see what we can find. All we need to do is point DIRB at the website and use the default dictionary. DIRB HTTP 10.0.2.32 /mutillidae and we can see lots of pages being detected, including one called Passwords and noting that the directory is listable. Let's visit the Passwords…

Contents