> For the complete documentation index, see [llms.txt](https://heapbytes.gitbook.io/notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://heapbytes.gitbook.io/notes/overview-fundamentals-cheatsheet.md).

# Overview (fundamentals/cheatsheet)

## Port scanning

* rustscan

```bash
rustscan -a $IP --ulimit 5000 -- -sC -sV | tee ports.scan
```

## Directory bruteforcing

* ffuf

```bash
ffuf -u http://$IP/FUZZ -w /usr/share/wordlists/SecLists/Discovery/Web-Content/big.txt 
```

* gobuster 

```bash
 gobuster dir -u http://$1/ -w /usr/share/wordlists/SecLists/Discovery/Web-Content/big.txt 
```

## Subdomain bruteforcing

* ffuf (vhost)

```bash
ffuf -u http://$subdomain/ -w /usr/share/wordlists/SecLists/Discovery/DNS/subdomains-top1million-5000.txt -H "Host: FUZZ.${subdomain}" 
```