Reconnaissance & Enumeration

Web Content & Directory Enumeration

Discover hidden pages, endpoints, and files an app didn't link to.

Intermediate · 12 min

Apps have far more endpoints than the navigation shows — admin panels, backups, API routes, old pages. Directory brute-forcing uses a wordlist to find them.

# Brute-force directories/files with a wordlist
gobuster dir -u http://target -w /usr/share/wordlists/dirb/common.txt

# ffuf — fuzz the FUZZ keyword against a wordlist
ffuf -u http://target/FUZZ -w wordlist.txt -mc 200,301,403

/admin, /login, /dashboard — access-control targets.
/backup, /.git, /config.php.bak — leaked source and secrets.
/api, /v1, /graphql — API attack surface.
robots.txt & sitemap.xml — free hints the site hands you directly.

Take the quiz →