Sometimes you need to test for other HTTP verbs too.
I personally used wget -O -
and piped into bash, which bypassed the need to set the file as excutable. Great writeup though.
Nice write-up, learned few tricks!
HI, thanks for the detailed write-up.
Regarding the “-w verbs.txt -w valid.txt”, where can we get those two wordlists?
verbs.txt
$ cat verbs.txt
GET
POST
valid.txt
$ cat valid.txt
monitoring/
aa.php
panel.php