1.1 穷举
https://book.hacktricks.xyz/generic-methodologies-and-resources/brute-force
路径穷举
dirb
dirsearch
$ gobuster dir --url http://192.168.88.140 -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -x .php
密码穷举
hydra
burpsuite
坚持就是胜利
https://book.hacktricks.xyz/generic-methodologies-and-resources/brute-force
dirb
dirsearch
$ gobuster dir --url http://192.168.88.140 -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -x .php
hydra
burpsuite