content-update

docs/Web/Enumeration & Content Discovery/Directory Busting/Content Discovery Tools/Cansina.md

@@ -0,0 +1,2 @@
+# [Cansina](https://github.com/deibit/cansina)
+

docs/Web/Enumeration & Content Discovery/Directory Busting/Content Discovery Tools/Katana.md

@@ -0,0 +1,26 @@
+# [Katana](https://github.com/projectdiscovery/katana)
+
+A next-generation crawling and spidering framework
+
+
+#### install
+
+Install using go [katana requires Go 1.18 to install successfully]
+```shell
+go install github.com/projectdiscovery/katana/cmd/katana@latest
+```
+
+If you can't use go, you can Install on Ubuntu using the below steps
+```shell
+sudo apt update
+sudo snap refresh
+sudo apt install zip curl wget git
+sudo snap install golang --classic
+wget -q -O - https://dl-ssl.google.com/linux/linux_signing_key.pub | sudo apt-key add - 
+sudo sh -c 'echo "deb http://dl.google.com/linux/chrome/deb/ stable main" >> /etc/apt/sources.list.d/google.list'
+sudo apt update 
+sudo apt install google-chrome-stable
+```
+
+
+

docs/Web/Enumeration & Content Discovery/Directory Busting/File and Directory Enumeration/Dictionaries.md

@@ -0,0 +1,2 @@
+# [Dictionaries](https://github.com/bl4de/dictionaries)
+

docs/Web/RFI-LFI File Inclusion.md

@@ -1 +1,10 @@
-Test
+
+
+[FDsploit](https://github.com/chrispetrou/FDsploit)
+
+FDsploit can be used to discover and exploit Local/Remote File Inclusion and directory traversal vulnerabilities automatically. In case an LFI vulnerability is found, --lfishell option can be used to exploit it. For now, 3 different types of LFI shells are supported:
+
+simple: This type of shell allows user to read files easily without having to type the url everytime. Also it only provides the output of the file and not the whole html-source code of the page which makes it very useful.
+expect: This type of shell is a semi-interactive shell which allows user to execute commands through PHP's expect:// wrapper.
+input: This type of shell is a semi-interactive shell which also allows user to execute commands through PHP's php://input stream.
+

docs/misc.md

@@ -0,0 +1,15 @@
+
+Rico's cheatsheets
+https://github.com/chrispetrou/cheatsheets?tab=readme-ov-file
+https://devhints.io/
+
+
+
+GooFuzz - The Power of Google Dorks
+https://github.com/m3n0sd0n4ld/GooFuzz
+
+
+Direnumerate is an open source tool written in Python designed to automate directory and file enumeration on web servers. It is useful for security professionals and system administrators who want to identify hidden resources and assess the security of web applications.
+https://direnumerate.readthedocs.io/
+https://github.com/JuanBindez/direnumerate
+