Hello everyone. So in
the previous video we saw how can
you identify sensitive directories on
any Target for your penetration testing?
in this video
How can we not use diss search to identify the
websites which contains sensitive directories?
This is one of the most used tools which
is used for brute forcing the
directories and identifying the sensitive directories and
getting sensitive data from those territories.
So the format of doing this particular
scan is python dissearch dot Pi
- U stands for the URL and you can give the URL
that you want to scan.
One interesting thing about dir search is you have
to add hyphen e - e stands for
the extensions that you want to look for. So it
will also look for the extension PHP zip
in case of
there are some files of source code which are
zipped by the developer.
We can also get those and download those aspx dot
EnV files the environment files.
Sometimes XML files because the developer
may have stored some sensitive username password
credentials tokens API Keys Etc
backup files. Sometimes they tend to
make backups of their logs and configuration
files. So we are going to search for
these menu files onto this particular Target.
So once I hit enter you can see diar search
will start on to this particular Target. So
as you can see, this is the output.
4 0 3 stands for the request was forbidden 3
0 1 stands for it was
a redirect for that particular request and
200. Okay is the server
is able to fulfill our request so
we did not got anything sensitive over
here. No problem. Let's go to the next Target.
So in as you can see over here in the
next Target we have mirror Dot.
Macomb net Dot
net
Over here we see that.
We got some of the interesting results over
here as you can see 200 OK for
ETC past WD and you all know
Etc passed WD is a very very sensitive
directory into our Linux machine.
Where it contains all the information about our
users which we have created.
So in my computer, I'm just going to read this file. You can
only read this file. Once you are a
super user or a root user. So I quickly switch to the
super user. And now when I'm reading this file you
can see
The users which are created into my computer. So
these are all the users which are running right
now into my computer.
Yes. All right. So what I did I quickly went
to that particular link.
That we got from the dir search. And once I
click that link, you can see here. I can see the past WD file.
I will just download this file. You can
see it is downloaded. Let me just open up and check.
So I will just right click open with text edit to
see what is there inside and you can see over here.
I'll just zoom it.
We can see the server which is running is.
Free BSD you can see the machine is by the name of Peter.
You can see these are the users which are created into that
particular machine.
So this is enough information for any program to
send to show the severity because this
file is considered very very sensitive.
So how I hope you guys understood this video. Thank you.