Useful snippets and links for hacking competitions. Work in progress
- peoplefinder - Information about Persons
- who.is - Domain lookup
- sublist3r - Subdomain enumeration
- hunter.io - Find emails associated with domain
- builtwith.com - See what tech the site is built with
- wappalyzer - Similar to builtwith
- viewdns.info - Lookup a lot of information regarding domains and ip.
It is often useful to do two nmap scans - one for low hanging fruit (quick), and one that can run in the background and scan all ports.
Quick: nmap -sC -sV -oA quick.nmap <target ip>
Long: nmap -sC -sV -oA -p- full.nmap <target ip>
Dir scan
VHOST scan
