Shulou(Shulou.com)06/01 Report--

1. Tool-assisted search

Ming Boy, ah D, some tools under wwwscan,nikto,kali, etc.

And some column catalog tools: Acunetix Web Vulnerability Scanner, JSky, IntelliTamper, Netsparker... Wait

two。 Utilization of website resources

The Robots.txt text of the root directory of the website, the picture path explodes in the background, check whether the copyright information at the bottom of the website is connected, and know it by querying the file name in the website.

3. Search engine query

There was a reprinted article that introduced the use of search engines in detail.

Site:heimian.com intext: administration | backend | login | user name | password | CAPTCHA | system | account | manage | admin | login | system

Site:heimian.com inurl:login | admin | manage | manager | admin_login | login_admin | system

Site:heimian.com intitle: management | backend | Log in |

Site:heimian.com intext: verification code

4. Guess

For example, some time ago, CCTV http://chinvan.cctv.com/ChinvanAdmin/login.aspx saw that there is no such situation. It is the domain name + admin that we often encounter.

Www.heimian.com

Heimianadmin heimian_admin heimianmanage adminheimian and so on, this should be combined with experience to guess again.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.