Assets Enumeration

Crawling#

ProjectDiscovery tool. See ProjectDiscovery Tools

Crawl and parse js files for more endpoints

katana -u domain.name -jsl | tee -a assets.txt
cat domains.txt | katana -jsl -kf all -td -d 10 | tee -a assets.txt

See Reconspider This tool crawl and parse html comments, links, emails, etc

python3 ./reconspider.py http://domain.name

gobuster dir -u http://$target/ -w /usr/share/seclists/Discovery/Web-Content/common.txt

ffuf -w /usr/share/seclists/Discovery/Web-Content/common.txt:FUZZ -u http://$target/FUZZ