^hot^: Gobuster

Output full enumeration for report:

Run Gobuster with a small wordlist first. gobuster

gobuster dir -u http://target.ctf -w /usr/share/wordlists/dirb/common.txt -t 20 Output full enumeration for report: Run Gobuster with

gobuster dir -u http://target.ctf/hidden-login -w /usr/share/wordlists/dirb/common.txt -x php,html Found login.php with default credentials → access granted. gobuster