Directory Scan

Training Overview

The "Directory Scan" training provides a comprehensive overview of directory scanning techniques and tools to uncover security vulnerabilities in websites. Starting from the basics, the training covers how to use fuzzing techniques and wordlists (wordlist). This is an important method for finding potential weak points and hidden directories on the target system. It also provides information about manual discovery methods, explaining how files like robots.txt and sitemap.xml can be examined and how they might expose potential vulnerabilities.

The training then focuses on the use of popular and effective directory scanning tools such as Gobuster, Feroxbuster, Dirb, and FFUF. It explores the directory and file scanning modes and features of each tool in detail, guiding users on how to use these tools effectively. Advanced topics such as file extension scanning and directory fuzzing techniques are covered, providing security professionals with strategies to discover hidden files and directories in web applications.