-host [host] — Defines host to scan.
-proxy [ip:port] — use a proxy server
-S — Standard misconfig and other checks
-Eb — Error Begging. Sometimes a 404 page contains server info such as daemon or even the OS
-auth — Dictionary attack to find login pages (not passwords)
-cmsPlugins [dp | jm | wp | all] — check for cms plugins. dp = drupal, jm = joomla, wp = wordpress (db’s a bit outdated 2010)
-I — Find interesting strings in pages (very verbose)
-Fd — look for common interesting files and dirs
-Ws — look for Web Services on host. such as hosting porvider, blogging service, favicon fingerprinting, and cms version info
-e — everything. run all scans
Industrial Cybersecurity
September 28, 2023
Want always be up to date?
By subscribing to our mailing list, you will be enrolled to receive our new trainings, latest blog posts, product news, and more.
Transform your cybersecurity skills with CIP Cyber’s comprehensive training & course offerings
The energy sector’s importance is underscored by its designation as an “enabling function” across all critical infrastructure sectors, as per Presidential Policy Directive 21. Serving
This course goes from scratch to advanced; it covers the most critical aspect of OSINT (open-source intelligence). The OSINT plays a vital role in the
An insecure website is a serious security risk for organizations of all sizes. Insecure websites are highly vulnerable to cyberattacks, malware, and other cyberthreats, and
Want always be up to date?
By subscribing to our mailing list, you will be enrolled to receive our new trainings, latest blog posts, product news, and more.
Transform your cybersecurity skills with CIP Cyber’s comprehensive training & course offerings
