Content Discovery

Content

• assets (files, vids, imgs…), features + more.

Discovery (methods)

• manual, automated and OSINT + combination.

Manual

• /robots.txt, favicon | md5sum ^, sitemap.xml, headers curl $ipa -v, framework stack via comments, (c) notices or credits.

OSINT

• GoogleDork(site, inurl, filetype, intitle), wappalyzer, wayback, github, S3 Buckets http(s)://{name}.s3.amazonaws.com.

Automated:

• fuzzing(dirb, gobust, fuff, ferox).