Gathering of information specifically about a web application, server, or website to identify potential vulnerabilities, configurations, or sensitive data.
It involves probing for directories, subdomains, hidden files, frameworks, technologies, and other web-specific details.
Methods
- Web Fuzzing.
- Find techstack fingerprints with Whatweb.