It's time for us to combine a skill that we just learned and a previous one
that we've covered before.
We're going to take GoBuster and WGet and put them together against our
playground website.
Now, as you can see here on the page already, I already have the GoBuster
command that we ran to crawl just to give us a listing of files and directories
against the BWAP site.
Now, this is not really all inclusive.
There are different commands that I have linked above that you can expand on
and play with yourself.
But a lot of these are based on the word list and file extensions that I added
to GoBuster.
And based on the status code, you can expect some of these to show up in our
crawl and some of them not to.
So we're going to open up another terminal window here and you can see that I
already have this command prepped and ready to go.
And I'm going to have it right below this video as well.
We're going to use our good old friend WGet to help us crawl this website based
on the information that we've received from GoBuster.
And we can the reason that we're doing this as I'm running it.
And after I type in my pseudo password, primarily is because it's easier to
examine things for vulnerabilities offline and away from the site.
Then it is to do it while you're online during a pen test itself.
Now, as you can see here, we've downloaded a lot of material and already have
the folder open by the scenes.
And this is everything available to us based on the root FQDN crawl that we did
with WGet.
I would encourage you to go through your GoBuster results and see if you can
crawl individual directories with WGet in the future.
Now, if you open up BWAP, the folder, that's the actual top level FQDN of the
crawl itself, you could see that we have many things in here.
And again, we can now examine these offline at a safe location for us to be
able to go through and come back with that gained knowledge and do a pen test
or an exploit against something that we found in data that we pulled for our
offline examination.
And this is where using new tools and O-tools alike allow us to be able to go
through and start tying everything in together so that we can move on to the
next portion and say, "All right, now it's time for a full-blown vulnerability
assessment against these web servers and these web applications to see if there
's anything that we can do to leverage and to get into the actual system to do
more testing."
Testing. We're still sticking with testing.