OK, time to cover another tool used for website numeration, which is called dirt.
Now, this will be a rather quick video because this tool is not that big, but it is really useful.
We use the trip to discover hidden directories on a website, or you can also consider it as a tool
that is used to brute force directory names and see whether certain directory names exist on a website
or if they don't.
Now, as with almost any other tool that we use, we can run Derb straight from our terminal and to
open the help menu if we can just type there, which will give us all of the available options that
we can use with this tool.
But since website numeration is not our main part of the course, we really want to get straight into
podcasting.
We'll just cover the basics of this tool, which you probably will always use like this.
However, if you do want to check out all of the other options to see what else you can do with the
tripto, but for this video, what we want to do is we want to discover some hidden directories.
And to do that, all we have to type is there and then HTTP and then the IP address of our virtual machine.
If we type it like this and press enter, it will start running without specifying any other option
whatsoever.
And you can see all of these output that we get are discovered directories on the website right here.
We can see how many generated words did it create.
And all of these words will be tested out as a possible directory on this website.
Straight away, we managed to find some of them.
As we can see, we have assets on the website.
We have CGI been we have cross domain.
And if you're wondering what is this in the brackets, this simply just gives us the code.
And as we already know, code two hundred means that the page below that successfully, which also means
that the page exists on that website.
If it were to get some other code resulting in an error, then the toll would probably determine that
that page does not exist.
So it doesn't print it out right here.
OK, so if we go all the way down, we can see that it already discovered a bunch of other directories.
And what you would do is you would pretty much go through this and see whether you see anything interesting
for us.
For example, any administrator directly could possibly be interested.
Of course, if you find something that has password's inside of its name, that would also be interesting
because you never know what the website developer put there.
Maybe they forgot to remove a certain directory from the test phase and they left it right there, which
could possibly have perhaps the source code or some additional information, such as users or perhaps
they made the entire database public.
I mean, you never know, even though it is rare, it can.
And it does happen sometimes.
So nonetheless, let's see.
To which point the to get and it's still discovering the rectory, so I'm just going to stop this because
I don't really need it to finish till the end.
Instead, I also want to show you another option that you can do with Therp, since if you type a straight
command like this, which is just therap and then the IP address over HTP, it will use its usual list
that it always uses.
But what you can do is you can specify your own list right after the IP address.
You can do something like user share word lists.
And this is the path to word lists in Linux.
So it's less user slash here and then slash wordlist.
And if you want to see all of the options that you have inside of this wordlist directory, you can
press tab twice fast.
And here you will be able to see all of these subdirectories to this wordless directory.
And since we are running therp, let's go to the third subdirectory.
And inside their subdirectory, we have all of these files and all of these text files are certain lists,
let's go with Commendatory.
Which I do believe is Also-Ran by default, but nonetheless, let us just see how we can use a specified
wordlist of our choice and all you have to do is press enter and it will pretty much do the same thing
just with your wordlist.
Instead, it will try to find all of those directories and it will print out the ones that exist.
And if you wanted to, for example, make sure that the certain directory exists, what you can do is
you can copy any of these directories.
For example, let's go with this one, which is slash images.
You can go to your Firefox and visit it like this.
And we do see that images of the electorate does exist on our own virtual machine.
You can do so with any other as well.
Such as, for example, my admin.
Let's copy the link.
And let's face it right here.
And it also loads my admin login screen.
Also, all we left to do is cover two more important talks in the next video, we will cover and map,
which will pretty much be just the basic cement map, because that is a huge tool.
It has bunch of options and we're not getting into details with a map.
However, we'll cover some of the basics of it in the next video.
And then in the next section, we're going to dive deep into a tool called.
Now, why are we going through all of these previous tools with only basic options and with purpose
that we're going to go with advance options?
Well, it's pretty simple purpose.
It is a tool that you will use for bug bounty.
Its main purpose is to actually use it for bug bounty, while as all of these tools that we covered
by now you can use if you like, but you don't really have to, it's pretty much your choice nonetheless.
More about Burset in the next section.
And let's focus now on a map which we will cover in the next video.
See you there.