Some general web dir enumeration tips:
- use multiple lists
- add extensions e.g. txt, php, py, pl, config
- filter HTTP status codes (200 only, exclude 500 errors, exclude 404, as examples)
- use a custom list tailored to the system
- change the user-agent of your scanner
Ever heard of #ICS vulnerability? ๐ค
Industrial Control Systems have been a hot topic lately! Learn from our own @8balla1 what are the risks of ICS/SCADA attacks and why they are so critical to our day-to-day lives ๐ https://t.co/nv93tXUAyj
#HackTheBox#Blog#CyberSecurity
@jeffmcjunkin@g0tmi1k@offsectraining@TJ_Null Yup. Bad tweet by me -- Hadn't realized how easy it is to dig through the repo to see where things get it from. Kali's Gitlab shows it is from BC-Security https://t.co/2TwXBXt7Dd.