Web Checklist

Tasks performed when working on a web server.

General Steps

• Port-scan (nmap scripts)

• Technologies used (curl, whatweb)

  • Add extension to fuzzing

• Page source

• robots.txt

• Fuzz for directories, subdomains, vhosts

• GoWitness (multiple pages)

• Account creation (proton, 10MinuteMail)

• Default creds (creds search <TECH>)

• Weak creds