> For the complete documentation index, see [llms.txt](https://derek-johnson-1.gitbook.io/welcome/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://derek-johnson-1.gitbook.io/welcome/projects/useful-commands-for-website-hacking.md).

# Useful commands for website hacking

#### Feroxbuster is a tool that uses GET requests to append website urls with common internal page names. This allows you to see if any website directories that have sensitive information are public and exposed to the internet.

```
./feroxbuster -u https://0a4f00440320382c80a1c1cb00340046.web-security-academy.net/ -w /home/kali/common.txt
```

<figure><img src="https://2268061532-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fo71vDQ8YHfe6Cj11Juh6%2Fuploads%2FPlrttx1wEzsb08PqPZxv%2Fimage.png?alt=media&amp;token=c6d088c6-b774-4e4c-b06c-828d4e79949a" alt=""><figcaption></figcaption></figure>

#### If you follow some of those links you can see that the one with /phpinfo.php could be exposed sensitive information

<figure><img src="https://2268061532-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fo71vDQ8YHfe6Cj11Juh6%2Fuploads%2FL8XgrezEmWTPIfk44SmP%2Fimage.png?alt=media&amp;token=65f1471f-9449-459d-ad3a-d0490d8fa798" alt=""><figcaption></figcaption></figure>

#### pwd displays the working directory you are in

```
pwd
```

####