> For the complete documentation index, see [llms.txt](https://4lec4st.gitbook.io/4lec4st/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://4lec4st.gitbook.io/4lec4st/ejpt-cheatsheet/enumeracion-web-80.md).

# Enumeración web (80)

## 🧑‍💻 Enumeración Manual

#### 🔎 Ver encabezados HTTP (server, cookies, etc.)

```bash
curl -I http://<IP>
curl -v http://<IP>
```

#### 🌍 Identificar tecnologías

```bash
whatweb http://<IP>
```

#### 📁 Enumerar directorios y archivos ocultos

```bash
gobuster dir -u http://<IP> -w /usr/share/wordlists/dirb/common.txt
```

#### 🔐 Detectar métodos HTTP permitidos

```bash
curl -X OPTIONS http://<IP> -i
```

#### 🤖 Ver archivo `robots.txt`

```bash
curl http://<IP>/robots.txt
```

***

## ⚙️ Enumeración con Metasploit

> Asegúrate de haber ejecutado: `msfconsole`

#### 🔍 Enumerar versión del servidor HTTP

```bash
use auxiliary/scanner/http/http_version
set RHOSTS <IP>
run
```

#### 📦 Ver encabezados HTTP

```bash
use auxiliary/scanner/http/http_header
set RHOSTS <IP>
run
```

#### 🤖 Ver contenido de `robots.txt`

```bash
bashCopiarEditaruse auxiliary/scanner/http/robots_txt
set RHOSTS <IP>
run
```

#### 📁 Enumerar directorios (fuerza bruta)

```bash
use auxiliary/scanner/http/brute_dirs
set RHOSTS <IP>
set PATH /        # Ruta inicial
run
```

#### 📁 Escaneo de directorios con diccionario

```bash
use auxiliary/scanner/http/dir_scanner
set RHOSTS <IP>
set PATH /
set DICTIONARY /usr/share/wordlists/dirb/common.txt
run
```

#### 🧾 Detectar listado de directorios habilitado

```bash
use auxiliary/scanner/http/dir_listing
set RHOSTS <IP>
run
```

#### 📂 Enumerar archivos en un directorio específico

```bash
use auxiliary/scanner/http/files_dir
set RHOSTS <IP>
set PATH /uploads/
run
```

#### 📤 Comprobar si está habilitado el método HTTP PUT (subida de archivos)

```bash
use auxiliary/scanner/http/http_put
set RHOSTS <IP>
run
```

#### 🔐 Fuerza bruta de login HTTP (básico/digest)

```bash
use auxiliary/scanner/http/http_login
set RHOSTS <IP>
set USER_FILE /usr/share/wordlists/users.txt
set PASS_FILE /usr/share/wordlists/passwords.txt
run
```

#### 🏠 Enumerar directorios personales de usuarios en Apache

```bash
use auxiliary/scanner/http/apache_userdir_enum
set RHOSTS <IP>
set USER_FILE /usr/share/wordlists/users.txt
run
```