Hi friends.
Welcome back.
In the previous lecture, we covered how to get some of the subdomain that is exist for a website.
Now it is time to go and search for hidden path.
Some hidden path.
For example here you see we have the Matilda.
Matilda here.
And in here we may have some kind of hidden path.
For example, we may have something like Login.php.
Hit enter.
You see, we have I found this, okay.
And you see, now we have a login page.
Sometimes we are not able to find this login page from the website itself.
Okay.
From here, for example, I am not able to find the login page and uh, not just the login page.
And also we may have a lot of, uh, hidden path that we need.
By finding them, we will be able to access a lot of Of information that may be good for us.
So in here again I have a item path dot txt.
There's also a text file.
And you see I'm going to test this little thing here for example.
CSS dot config dot c v dot login.
And a lot of thing that may be very informative for us.
Okay.
That we can we could use it.
So.
Uh here as you see we have slash now instead of.
Having the dot.
And when I use login dot php.
You see we have slash between these two.
Okay.
So that means this thing is inside a directory.
And this model ID is in another directory.
And it has for example a child directory.
And it is uh this login page is inside that.
Okay.
Now I can access that with using a slash.
So we can modify them.
We can modify this code that is here very easily.
The first thing we need to change the URL.
So the URL right now is this one.
Let me remove some of them.
For example up to here I'm going to copy this and paste them into the URL that we have.
So as you see we have HTTP and the HTTP is provided right in here.
We don't need to have them in this part.
Okay.
Now we have this like this.
And we need to open another file.
As you see we right now we are opening the subdomain file.
That is something we don't need.
We need to open the hidden path.
Okay.
And I'm going to read that.
And also you see we are opening that uh, with uh, a dot, okay.
Separating the URL and word with a dot.
Now it is time to change that to a slash.
So and you see we have discover let's name it hidden.
Or domain or directory.
And that is it okay.
Now let me save this and let's go back here.
Try to execute the program and see what do we have.
I'm going to clear this.
Okay.
Hit enter.
You see we have an error somehow.
Okay.
In here.
You see?
We have something.
Okay.
let me see first.
What happened?
Okay.
We have a problem here.
Let's read the problem.
It's telling me that invalid URL.
Okay, this is the error.
We have HTTP and then we have three slash here.
And then we have the URL here which is not very good.
Okay.
We have the URL first.
Okay.
This is the URL.
It is okay.
Now I found the problem.
Okay.
As you see here we have the word okay.
Basically here we are saying that okay first we are opening that as a word list.
And then we are moving inside each line.
Okay.
In here.
And then we are reading each line line by line.
And then we are adding that the first and then the second one the URL.
So this is the problem.
We have the hardened path for example the first one it will be having something like this.
And then we will be having this one.
Like what was that then .0.0. 13 and then blah blah blah blah.
So this path doesn't exist because of that.
It is giving me an error and it is not valid.
Okay.
So we have to handle that in here because in here we are using the word first and then the URL in the
second part.
Now instead of using URL here, I'm going to use the word here and then move back into word and use
the URL here.
Now I'm going to save this.
Okay, let's deliver this one and execute this.
Now you see that discovered hidden directories is equal to uh.
This is okay.
Classes created documentation filter.
And you see, we are getting a lot of information here.
For example, I'm going to take a look at this okay.
Copy selection.
Let's come here I am going to paste it here.
You see we have this information here.
Now I know that this path exists okay.
And also if I came here you will see that I will find a very informative, uh, thing here.
For example, we have login.
Okay.
That was something that we just found and also we have home footer header images is not very important
and it's not very important login which is very important.
Okay.
We have something called password here.
Okay I'm sure this is hidden.
And let's copy this and also.
See what we have.
See this is one of the most important thing that you can use while you are going to hack through systems.
Okay.
So here you get one of the most important thing that is password okay.
So account password.
Some accounts for example admin.
This is the password for admin.
This for this one for John this one.
And also this for this one.
This is I like the smell of this one.
And also.
This is a very informative.
This was very informative.
Okay.
Also we have PHP info which is very important to PHP info that PHP also.
You see we have the style here that these are I'm sure directories maybe inside these.
Also you are going to find something new okay.
And if you want to find something new.
You can use that as well.
For example you you can use another loop to come inside this one and find more details like this.
So and now you see in penetration testing we can use such kind of program that could find very, uh,
hidden path for us.
And we can search for very informative data, sensitive data and we can use it.
Okay.
Very beautiful, very good program.
So thanks for watching.