[Sky Priority]

Hey folks,

My friend and I set up some fake sites to do a mini ctf, I almost have him I have the user/decrypted pass but i can find the damn admin site. I've tried scripts such as adfind, but it is not locating it.

Any tips?

Thanks,

[Mortox]

Which are you trying to get, php, html? Admin pages have different index names like HK

[Sky Priority]

Which are you trying to get, php, html? Admin pages have different index names like HK

php, is there any tools you would recommend?

[Mortox]

Try /admin.php
Or keep searching database for it

[BigJoe7413]

/admin.php
/administrator.php
/login

admin.(domain.com)

or force a 401 by trying to access something restricted like /logs

[compalabee]

Any tips?

Thanks,

If your friend followed CMS standards, dirb should help you out.

On Kali,

PHP Code


<?php 
apt update
apt install dirb
dirb http://targetdomain/ 


[3xploit]

If your friend followed CMS standards, dirb should help you out.

On Kali,

PHP Code


<?php 
apt update
apt install dirb
dirb http://targetdomain/ 


I prefer wfuzz to scan for directories

[compalabee]

I prefer wfuzz to scan for directories

Yeah, actually wfuzz is much faster. I only really use dirb because it's recursive haha

[Aergia]

Yeah, actually wfuzz is much faster. I only really use dirb because it's recursive haha

If you want speed use anything written in Go (Gobuster).

[vira]

try search google about features
spider

from tool burpsuite