Please enable JavaScript.

Coggle requires JavaScript to display documents.

Information Gathering (Gathering Information on Your Targets (Sorts Of…

- - - - Server Version
      - IP Addresses
      - Name Servers
      - Uptime stats
      - IP Address Owner
      - Host Provider
    - - Bypass
        
        Wappalayzer
        
        httprint
        
        whatweb
        
        NetCat
      - mod-security WEBSITE
        
        Obfuscate Service Banner
    - - .htaccess [Apache Config File]
      - mod-rewrite [Apache Config File]
  - - - Site:
      - inurl:
      - -site
      - -inurl
    - - Subbrute
      - dnsrecon
      - theHarvester
    - - nslookup
      - dig
    - - fierce
- - - - Forms
      - Blogs
      - Shopping
    - - Spider
      - Site Map
    - - Purpose of website
      - Core of website
      - Main Areas of website
      - Third Party Apps
    - - Client Side Validation
        
        SQL Injection
        
        XSS
      - Database Interaction
        
        SQL Injection
      - File Uploading & Downloading
        
        Remote
        
        Local File Inclusion
      - Display of User Supplied Data
        
        Cross Site Scripting
      - Redirections
        
        3XX Response
        
        Time Based Rediredtion
        
        Meta Tag
        
        HTTP Response splitting
        
        Header Manipulation
      - Access Controls and Login Protected Pages
        
        Authentication bypass techniques
        
        password brute forcing
      - Error Messages
      - Charting
        
        Tree Based
        
        Table Based
- - - - Spider
    - - DirBuster
        
        Status Code 200
      - Backup Files .bak
    - - Burp Suit
      - Patator
- - - - configuration.php.bak
    - - OPTIONS HTTP
        
        NOT (4XX,5XX)
      - PUT
        
        Content Lenght
        
        201 Created
    - - Python Scripting