Hypertext Transfer Protocol

HTTP is a stateless application layer protocol used for the exchange of information on the World Wide Web. HTTP uses TCP port 80 for communication.

Let's go through some of the following HTTP auxiliaries:

  • http_version: This auxiliary module probes and retrieves the version of web server running on the target system. It may also give information on what operating system and web framework the target is running.

Its auxiliary module name is auxiliary/scanner/http/http_version, and you will have to configure the following parameters:

    • RHOSTS: IP address or IP range of the target to be scanned

We can see this auxiliary module in the following screenshot:

  • backup_file: Sometimes, the developers and the application ...

Get Metasploit Revealed: Secrets of the Expert Pentester now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.