https://twitter.com/hacker_/status/1522253314854952967?s=20&t=pP0MmOBLerPUL0NeJTPmzA
→Content-discovery cheatsheet
→Content-discovery cheatsheet
Make URL path combinations using a wordlist
https://github.com/trickest/mkpath
- Content discovery is the process of searching through and finding content. This is a process that your customers and leads go through when they find and engage with your brand's content on your website, social media sites, and anywhere else online.
- it is a wide topic including directory brute forcing, parsing JavaScript files and extract endpoints and parameters.
- [ ] Study site structure
- [ ] Create target-specific wordlist
- [ ] nmap + shodan scan
- [ ] find out ip address and scan it too
- [ ] start looking from the old stuff other hunters forget there.
- [ ] use visualping.io too see the changes in the website
- [ ] https://monitoro.app/ same as visualping.io
- [ ] try to look for different site/URL in all that stuff.
- [ ] Click every button/check every functionality/look for every page and see the logs in burp-suite and look for wierd stuff like parameters, pages or other things related to that page.
- [ ] use linkfinder to find links of the website and try to do proper testing of the website. (in burpsuite)
- [ ] you can also use burp-crawler