HTTP / HTTPS (80 / 443)

🌐 HTTP / HTTPS — Port 80 / 443

Recon tooling: Web-enum. Exploitation: sqli, lfi-traversal, cmd-injection, file-upload, ssti, jwt, misc-web, wordpress.

Response codes

200 OK · 204 No Content · 301 Moved · 302 Found · 403 Forbidden · 500 Error

Important files / paths

robots.txt (crawl rules) · sitemap.xml · .htaccess (restrictions) · .git · /cgi-bin/ (apache scripts)

Google dorks

site: · inurl: · intitle: · filetype:

curl essentials

curl -v URL                       # version + headers
curl -o out.html URL              # save under a name
curl -X POST URL                  # specify method (don't trust the browser)
curl -F fieldname=@path URL       # form / file upload
curl --cookie "name=value" URL

Misc

• Wappalyzer tech stack ·
• FoxyProxy proxy switch ·
• PHPMyAdmin default root: (null).
• Read page source + JS
• Use the browser debugger for hidden inputs
• Burp for tampering.