H4ck0rman
Region: AU
Thursday 11 September 2025 05:00:00 GMT
193261
5614
129
228
Music
Download
Comments
Lord Mayon :
Sitemap is in every website with a bare minimum configured SEO
2025-09-11 06:21:17
91
Corona :
Vibe coders - take note. Implement IP and API rate limits
2025-09-12 15:15:15
87
eηѕσυℓ :
or you just return 200 on everything and 200 zero content if doesn't exist
2025-09-12 11:07:56
9
AC :
Some pages return 200 but when you view them it’s 404 this can be because of your user agent or many other reasons so false positives can happen
2025-09-12 14:12:04
7
sami :
for subdomains you only have to do a dns resolution and everything will be revealed
2025-09-13 10:09:13
0
Tianco | 1stScout :
How do you prevent this, can you cause a timeout to stop the bots from scanning?
2025-09-11 11:32:01
1
шыз обыкновенный :
can't they just return 404? like I know there's a code for denied access, but what stops them from sending 404
2025-09-11 08:25:09
1
user174829397 :
on the webpage "right click + inspect", then you also see the source code and directories.
2025-09-12 12:30:53
0
David :
I think you just started using a computer
2025-09-12 15:48:40
1
Guy Itayev :
Can't you use the robot.txt file?
2025-09-11 17:07:34
1
qwerty :
just use dirb the stock list of common domains.. works gr8 but can be stopped with a rate limiter
2025-09-12 12:09:21
1
Cabdi Waaxid Siciid :
that mean you can find all files in that website like the server files. right?
2025-09-11 18:59:11
0
Azmi :
what is the tools for this?
2025-09-11 21:03:10
0
S7R4NGER1 :
if you go to the page that doesnt exists redirects you to the home page.
2025-09-12 14:45:13
2
michele simonetti338 :
Yes and no, it’s correct but every decent website would see your request and understand you’re doing a reconnaissance and block you. Also many sides now are doing fake 200/404 just for mess your work
2025-09-12 20:22:30
0
SteTag :
what about obscure files/path ?
2025-09-12 13:52:57
0
unicornleftovers :
damn sorry for breathing the same ait as you king 💔
2025-09-22 08:45:01
1
Royal Tec :
so return 404 for anything confidential, and 403 for permissions based
2025-09-11 13:21:10
2
phackhead :
do you do pen testing if i built a cms and i want someone to test it?
2025-09-11 22:57:03
1
JJ :
but these only check the common name APIs you wanna find the hidden one where they rename forexample /admin to something else
2025-09-12 22:28:56
0
sami :
this assumes regular website behavior. in reality its entirely up to the server to choose how to handle this
2025-09-13 10:08:33
0
anthonywhitefield5 :
you can map it with a sitemap.
2025-09-12 09:56:05
0
To see more videos from user @h4ck0rmanttv, please go to the Tikwm
homepage.
