HackTheBox — Information Gathering: Active Enumeration

This blog post goes over the active enumeration process, which interacts directly with the target. There are 3 things we have to enumerate from the target: infrastructure, subdomains and virtual hosts.

ACTIVE INFRASTRUCTURE IDENTIFICATION

url

Use curl command to get the HTTP Headers: curl -I https://www.facebook.com, which tells us the web server used along with its version

whatweb

Whatweb provides us the technologies used by target, including CMS, blog platforms, JavaScript libraries, etc.A similar tool to Whatweb is Wappalyzer, which is an extension that can be added to our browsers.