# Enumeration

> HTTP enum covering fingerprinting, vhosts, dirs, APIs, CMS, and headers

- **URL:** https://hackindex.io/services/web/enumeration
- **Service:** [HTTP/HTTPS](https://hackindex.io/services/web.md)
- **Tags:** services, users, endpoints
- **Published:** 2026-01-18
- **Updated:** 2026-03-29

Web enumeration is the active discovery phase where you map out the target's web attack surface. Directory and file brute-forcing with feroxbuster, gobuster, or dirsearch reveals hidden endpoints, admin panels, backup files, and development artifacts that the application was never meant to expose.

Beyond directory busting, this phase covers virtual host enumeration to find subdomains served on the same IP, technology fingerprinting with Wappalyzer and WhatWeb, CMS detection for WordPress/Joomla/Drupal, and API endpoint mapping through wordlist fuzzing and documentation leaks like Swagger/OpenAPI files.

Start here to build a complete picture of the web surface before testing individual vulnerabilities. The difference between a shallow assessment and a thorough one is almost always the quality of enumeration.

## Guides

- [API Endpoint Enumeration](https://hackindex.io/services/web/enumeration/api-endpoint-enumeration.md): Discover hidden API endpoints via fuzzing, path traversal, JS analysis, and spec file leakage to map attack surface on HTTP/HTTPS services.
- [Burp Suite](https://hackindex.io/services/web/enumeration/burp-suite.md): Intercept, inspect & manipulate HTTP/HTTPS traffic using Burp Suite's proxy, scanner & repeater for web app enumeration and vulnerability discovery.
- [CMS Detection and Fingerprinting](https://hackindex.io/services/web/enumeration/cms-detection.md): Identifies CMS platforms (WordPress, Joomla, Drupal) via HTTP responses, meta tags, file paths, and headers to map attack surface during web enumeration.
- [Web Content Discovery](https://hackindex.io/services/web/enumeration/content-discovery.md): Techniques for discovering hidden files, directories, and endpoints on web servers using fuzzing tools, wordlists, and response analysis.
- [Drupal enumeration](https://hackindex.io/services/web/enumeration/drupal-enumeration.md): Techniques for enumerating Drupal CMS installations, including version detection, module discovery, user enumeration, and identifying misconfigurations via droopescan and manual methods.
- [HTTP Header Analysis](https://hackindex.io/services/web/enumeration/http-header-analysis.md): Analyze HTTP response headers to identify server technologies, security misconfigurations, and information disclosure vulnerabilities during web enumeration.
- [HTTP Tech Fingerprinting](https://hackindex.io/services/web/enumeration/http-tech-fingerprinting.md): Identify web technologies, frameworks, servers & versions via HTTP headers, cookies, error pages, and tool-based analysis to map attack surface.
- [Joomla Enumeration](https://hackindex.io/services/web/enumeration/joomla-enumeration.md)
- [Login Page Enumeration](https://hackindex.io/services/web/enumeration/login-page-enumeration.md): Identifies valid usernames & accounts via login page responses, error messages, timing differences, and behavioral analysis on web authentication endpoints.
- [HTTP Parameter Crawling and Discovery](https://hackindex.io/services/web/enumeration/parameter-crawling.md)
- [Virtual Host Enumeration](https://hackindex.io/services/web/enumeration/virtual-host-enumeration.md): Discover hidden virtual hosts on web servers by fuzzing Host headers, identifying subdomains and concealed services sharing the same IP address.
- [Web Crawling and Spidering](https://hackindex.io/services/web/enumeration/web-crawling.md): Systematically map web application structure by discovering pages, directories, and endpoints through automated crawling and link analysis.
- [WordPress Enumeration](https://hackindex.io/services/web/enumeration/wordpress-enumeration.md): Enumerate WordPress installations by identifying versions, plugins, themes, and users via WPScan, manual probing, and API endpoints.