Join Malcolm Shore for an in-depth discussion in this video Enumerating hidden webpages, part of Ethical Hacking: Enumeration.
- [Instructor] Spidering is fine for pages…linked to the main web root,…but we also need to find those pages that aren't.…For that, we can use one of a number of tools.…The main ones being DIRB, Dirbuster, and Gobuster.…Let's look at DIRB.…DIRB, by default,…uses its own small dictionary of webpages,…which can be used a first pass enumeration.…Like Gobuster and Dirbuster,…it also gives us the option of specifying…a word list file…and selecting specific file extensions to search for.…
Let's run DIRB in its simplest form.…The default dictionary file for DIRB…is in alphabetical order…and we can see the current word being tested.…We can see it's quickly found…a number of files and folders at the top level.…Once the top level structure and files have been listed,…DIRB starts enumerating the folders…and providing a second level of enumeration.…
This goes on until all folders and sub-folders…have been enumerated.…Okay, we can see that DIRB found 59 files.…Let's look at one of the other tools.…For this I'll run Gobuster…using its medium sized lower case dictionary…
An overview of the CEH exam, blueprint, and eligibility criteria can be found at https://www.eccouncil.org/programs/certified-ethical-hacker-ceh/.
- What is enumeration?
- Understanding NetBIOS, SMB, SAMBA, and RPC
- Profiling hosts
- Investigating interfaces
- Enumerating SMB
- Enumerating SNMP and RPC
- Enumerating the Internet
- Working with other enumeration tools
Skill Level Intermediate
1. Basics of Enumeration
2. Local Host Enumeration
3. Remote Hosts
4. Enumerating Web Apps
5. Enumerating the Internet
6. Other Enumeration Tools
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.Cancel
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.