From the course: Complete Guide to Cybersecurity: A Practical Approach

Unlock this course with a free trial

Join today to access over 24,400 courses taught by industry experts.

Performing website and web application reconnaissance

Performing website and web application reconnaissance

From the course: Complete Guide to Cybersecurity: A Practical Approach

Start my 1-month free trial Buy for my team

Performing website and web application reconnaissance

“

- [Instructor] There are many different tools that you can use for performing reconnaissance in a web application. One of the most popular is the Nikto scanner. So nikto can be launched from any Kali Linux or Parrot OS system. You can also install it very easily, just you an app get installed, Nikto. And in this case, what I'm going to do is I'm going to launch it against a system that has an IP address of 10.6.6.23. This is one of the containers in WebSploit. And as you can see, it actually starts to enumerate different interesting content. In this case, different directories like admin and admin/index.html, wp-admin, or it may be a WordPress installation and wp-login and so on. So in some cases actually allows you to obtain information about the underlying server. Like in this case it's actually running nginx/1.14.2 which is an older version of nginx. So this is actually a pretty nifty, very lightweight scanner for web applications. Another amazing tool is the OWASP Zed Attack…

Contents