D3F4
>Loading command center_
Web application reconnaissance and enumeration commands for discovering directories, subdomains, and web technologies.
Enumerate directories and files on a web server with Gobuster
gobuster dir -u http://target.com -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txtDiscover subdomains via DNS bruteforce with ffuf
ffuf -w /usr/share/wordlists/subdomains.txt -u http://FUZZ.target.comIdentify CMS, frameworks, and web technologies
whatweb -v http://target.comScan for common vulnerabilities and misconfigurations
nikto -h http://target.comRetrieve HTTP response headers from the server
curl -I http://target.comCrawl and discover all URLs with Gospider
gospider -s http://target.com -c 10 -d 3Fuzz for hidden GET/POST parameters with Arjun
arjun -u http://target.com/pageLook for exposed .git or sensitive files
curl -s http://target.com/.git/HEAD