Hey Folks, in this tutorial we will discuss on an interesting tool called “REDHAWK“. It’s an all in one tool for information gathering and vulnerability scanning. The tool uses multiple combinations of other third party tools as well as currently is able to detect the following CMSs (Content Management Systems).
List of CMS Supported
- WordPress
- Joomla
- Drupal
- Magento
Let’s take a look 
!!
Installation
Now first of all we will download this project using git command from gitub and after cloning the repository then we will go to the directory of this tool.
Note : make sure you should have php module to execute this tool.
Done !! The configuration is complete and now we can use this tool using the following command. Now we have entered our target details and protocol related details on which the website is running. Basically if the target website is running on HTTP protocol then you have to enter “1” otherwise “2″.
Great !! As you can see it has dumped some useful information related to the target website such as webserver, IP address, cms, cloudflare etc.
DNS Lookup
If you want to collect information related to the DNS server of the target website then you can use option “4”.
Calculate Subnet Mask
Similarly by using the “5” option of this tool we can calculate the subnet mask of this target web application.
Open Port Scanning
Often developers forget to add security to the active service running on the server, allowing the attacker to exploit those loopholes and remotely acquire the entire web server. So we use the following tools to find available or open ports on target web server.
Subdomain Finding
In addition, we can retrieve subdomain details through a particular host.
Basic Scanning
Now we will choose option “11” to perform a basic scan against the target web server.
Done !! As you can see for yourself what kind of details we get after using the basic scan feature of this tool.
إرسال تعليق