Crawling and scraping with Metasploit

Metasploit also allows us to crawl and scrape the web using auxiliaries. Scraping is useful when we want to grab something from the source code of a website via a defined pattern. It could give us information such as directories mentioned in comments, developer emails, and API calls being made in the background:

  1. For crawling, we can use the crawl keyword to find the module:
  1. We will use msfcrawler. Clicking on the module will redirect us to the options page where we define our target, port, and depth. Then, click Run Module:
  1. A new task will be created and we will see the list of pages found in the ...

Get Hands-On Web Penetration Testing with Metasploit now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.