HTTP/HTTPS:
Enumeration
HTTP enum covering fingerprinting, vhosts, dirs, APIs, CMS, and headers
API Endpoint Enumeration
Discover hidden API endpoints via fuzzing, path traversal, JS analysis, and spec file leakage to map attack surface on HTTP/HTTPS services.
CMS Detection and Fingerprinting
Identifies CMS platforms (WordPress, Joomla, Drupal) via HTTP responses, meta tags, file paths, and headers to map attack surface during web enumeration.
Web Content Discovery
Techniques for discovering hidden files, directories, and endpoints on web servers using fuzzing tools, wordlists, and response analysis.
Drupal enumeration
Techniques for enumerating Drupal CMS installations, including version detection, module discovery, user enumeration, and identifying misconfigurations via droopescan and manual methods.
HTTP Header Analysis
Analyze HTTP response headers to identify server technologies, security misconfigurations, and information disclosure vulnerabilities during web enumeration.
HTTP Tech Fingerprinting
Identify web technologies, frameworks, servers & versions via HTTP headers, cookies, error pages, and tool-based analysis to map attack surface.
Login Page Enumeration
Identifies valid usernames & accounts via login page responses, error messages, timing differences, and behavioral analysis on web authentication endpoints.