find HIDDEN urls!! (subdomain enumeration hacking) // ft. HakLuke
Source: YouTube · NetworkChuck · published Jul 25, 2022 · 17:29
This video introduces subdomain enumeration techniques for discovering hidden URLs and subdomains on websites, with demonstrations of two specialized tools 0:00 and explanations of their applications in cybersecurity 0:20.
Key Takeaways:
• Subdomain enumeration reveals hidden web endpoints that could point to different servers or systems, useful for both security assessment and hacking 1:30
• Using these tools requires permission - they're powerful but must be used ethically, such as in bug bounty programs where companies pay hackers to find vulnerabilities 2:39
• Hackrawler is an active enumeration tool that actually crawls websites like a spider, finding links by parsing JavaScript files, robots.txt, and querying the Wayback Machine 3:12
• The video demonstrates installing tools via Docker, showing the process with hackrawler and explaining the benefits of this installation method 4:36
• Gau (Get All URLs) provides passive enumeration by querying existing databases instead of actively crawling sites, making it less intrusive but still effective 15:22
The video emphasizes the value of creating your own tools, as both featured developers did, encouraging viewers to contribute to the community through innovation and sharing 16:32.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
Every website out there has
hidden URLs, like check it out. When you go to reddit.com, there's
more than just this one URL. There are hidden secrets
that we're going to find, because if I run a tool like this, we're
gonna find a lot more hidden secrets. Dang. It's still going, oh, by the way,
I'm gonna show you how to use that tool. So get your copy. Ready. What's going
on guys. Welcome back to network. Chuck in today's video, we're gonna
cover really two things. First. What I already showed you finding hidden
URLs in a process called subdomain enumeration. And I'm gonna show you how to use and
install two tools to make this thing happen, to find all the hidden secrets
of the internet. But disclaimer, there are rules you have to obey you.
Can't just use these tools on anybody. You need per…