Type your comment> @delo said:
Wfuzz can do that. It is semi-reliable for HTB boxes.
wfuzz -w /usr/share/wordlists/dirbuster/directory-list-lowercase-2.3-medium.txt -H "Host: FUZZ.host.com" --hc 200 --hw 356 -t 100 10.10.10.101Adjust the threads and hide code/word parameters to suit your needs.
I tried use wfuzz for searching subdomains in forwardslash but without any result.
wfuzz -w /usr/share/wordlists/dirbuster/directory-list-lowercase-2.3-medium.txt -H “Host: FUZZ.forwardslash.com” --hc 200 --hw 356 -t 100 10.10.10.183
I tried use wordlist with subdomains that exist for this box and I don’t get any result
Where I do mistake?