Hey Folks, in this tutorial we will discuss on an interesting tool called “REDHAWK“. It’s an all in one tool for information gathering and vulnerability scanning. The tool uses multiple combinations of other third party tools as well as currently is able to detect the following CMSs (Content Management Systems).
List of CMS Supported
- WordPress
- Joomla
- Drupal
- Magento
Let’s take a look 🙂 !!
Installation
Now first of all we will download this project using git command from gitub and after cloning the repository then we will go to the directory of this tool.
Note : make sure you should have php module to execute this tool.
1 2 | git clone https://github.com/Tuhinshubhra/RED_HAWK cd RED_HAWK |
Done 🙂 !! The configuration is complete and now we can use this tool using the following command. Now we have entered our target details and protocol related details on which the website is running. Basically if the target website is running on HTTP protocol then you have to enter “1” otherwise “2″.
1 | php rhawk.php |
Great 🙂 !! As you can see it has dumped some useful information related to the target website such as webserver, IP address, cms, cloudflare etc.
DNS Lookup
If you want to collect information related to the DNS server of the target website then you can use option “4”.
Calculate Subnet Mask
Similarly by using the “5” option of this tool we can calculate the subnet mask of this target web application.
Open Port Scanning
Often developers forget to add security to the active service running on the server, allowing the attacker to exploit those loopholes and remotely acquire the entire web server. So we use the following tools to find available or open ports on target web server.
Subdomain Finding
In addition, we can retrieve subdomain details through a particular host.
Basic Scanning
Now we will choose option “11” to perform a basic scan against the target web server.
Done 🙂 !! As you can see for yourself what kind of details we get after using the basic scan feature of this tool.
A keen learner and passionate IT student. He has done Web designing, CCNA, RedHat, Ethical hacking, Network & web penetration testing. Currently, he is completing his graduation and learning about Red teaming, CTF challenges & Blue teaming.
Hello, I think your blog might be having browser compatibility issues. When I look at your blog in Opera, it looks fine but when opening in Internet Explorer, it has some overlapping. I just wanted to give you a quick heads up! Other then that, very good blog!
you’re truly a good webmaster. The web site loading velocity is amazing. It seems that you’re doing any distinctive trick. Furthermore, The contents are masterwork. you’ve performed a great process in this topic!