Directory Hunting
Vinny Troia PhD · 2020
This chapter focuses on finding hidden gems within a website by looking for hidden folders within its structure. Dirhunt is a type of web crawler designed to search and analyze directories and folders within a web application. It is also designed to detect false 404 errors to minimize the number of false positives in results. Wfuzz is a bruteforcing tool, and probably one of the best available for bruteforcing web applications. It contains an almost infinite number of combinations that can be used to “fuzz” a web application. According to Photon's GitHub page, it is “an incredibly fast crawler designed for open-source intelligence (OSINT).” For OSINT, Photon can easily extract different target points from a website. This can include information about staff, contact info, related social media sites, documents, and other potential hidden company information like secret keys and bucket info.