vhost brute

┌──(root㉿kali)-[~/Desktop/htb/pov]
└─# ffuf -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-5000.txt   -u http://pov.htb/ -H "Host: FUZZ.pov.htb" -ac
        /'___\  /'___\           /'___\
       /\ \__/ /\ \__/  __  __  /\ \__/
       \ \ ,__\\ \ ,__\/\ \/\ \ \ \ ,__\
        \ \ \_/ \ \ \_/\ \ \_\ \ \ \ \_/
         \ \_\   \ \_\  \ \____/  \ \_\
          \/_/    \/_/   \/___/    \/_/
       v2.1.0-dev
________________________________________________
 :: Method           : GET
 :: URL              : http://pov.htb/
 :: Wordlist         : FUZZ: /usr/share/seclists/Discovery/DNS/subdomains-top1million-5000.txt
 :: Header           : Host: FUZZ.pov.htb
 :: Follow redirects : false
 :: Calibration      : true
 :: Timeout          : 10
 :: Threads          : 40
 :: Matcher          : Response status: 200-299,301,302,307,401,403,405,500
________________________________________________
dev                     [Status: 302, Size: 152, Words: 9, Lines: 2, Duration: 822ms]
:: Progress: [4989/4989] :: Job [1/1] :: 458 req/sec :: Duration: [0:00:10] :: Errors: 0 ::
  • -ac 是一个很实用的参数,它的意思是Auto Calibration(自动校准) ,能够帮你自动过滤掉很多请求中出现的噪音或不相关的响应。