Useful commands for website hacking

Feroxbuster is a tool that uses GET requests to append website urls with common internal page names. This allows you to see if any website directories that have sensitive information are public and exposed to the internet.

./feroxbuster -u https://0a4f00440320382c80a1c1cb00340046.web-security-academy.net/ -w /home/kali/common.txt

If you follow some of those links you can see that the one with /phpinfo.php could be exposed sensitive information

pwd displays the working directory you are in

pwd