All right, so the last picture we got got going and now we're going to start cyclists and all of that
we see here what cyclists it's it's the security testers coming in.
And it really contains a list of usernames, passwords, zero sensitive data, a bunch of different
things that you want to look for if you're forced browsing, trying to delete directories directory
traversal all the time, maybe trying to do forced browsing and trying to break in.
You can see here tons of lists here, right.
For APIs, for your house, for different content management systems.
WordPress is here.
Right.
And you can go through this.
And you can look us in your tools like bourbon intruder.
You know, or was or if and there's different tools you can use and you can basically.
I watch these payloads against their targets.
So what we're going to do is we're going to grab this, this is really the industry standard.
I don't know why it isn't included in college by default.
But we're going to install cyclists and then we're also going to get all that text, so of Jason Haddock's
just super elite, I mean, he's one of the one of the most prominent bug bounty hunters in the industry
right now.
He produced a file called All That Text.
And he basically what he did was it's an amalgamation of all the DNS numeration word lists that have
ever existed.
So, I mean, this pile is humongous and it's really, really good because this word list is based on
valid data and based on common speak, which is a project that basically includes the domains or something
means from the Aleksa top one million sites.
It's based on wordlist from fierce, some old tools and some new tools.
I mean, there's just so much data in this wordlist and it's a really great tool if you want to try
to find, you know, an endpoint or try to find a subdomain.
So we're going to go and grab both of these and then we're going to get started.
So it's going to minimize this must jump right in.
Let's go ahead and install Cycliste.
And again, we can select info cyclists.
You want to learn more about it?
Cyclers is a collection of multiple types and less used during security assessments.
Right.
So it's pretty much everything that we saw in the GitHub page.
So you don't have to install cyclists.
All right, so we already have it so I can do a little update DB.
So I did not know we already had it, so we didn't have it.
Now you do.
So when we do update what that does is it updates the index of all the files in the system so we can
type locate cyclist to find it.
You can see it in this user share cyclers folder.
Right
in.
There we go.
We've got everything there.
We should also install tree.
You'll see what that does.
Now, if I type trade shows everything is a tree, so that's kind of useful, but now that we have Cycliste,
we have our wordlist.
Now, what you need to get the all that text right, so we'll put that in use or share word lists,
word lists is not here right now, but we did get.
And we'll just paste it in, I just right, clicked in the window, I had the path copied to my clipboard.
I press, OK, it's going to pull it down.
You can see it's about 25 megabytes.
If we do a word count like this to work out, you can see that it is, wow, over two million lines
and it is twenty six megabytes in size.
So we can start going.
You could start going through this file.
But this is one big file.
Right.
And you can use this for, you know, first domains.
Right.
Basically it would append this to everything, you know, to everything.
Maybe it's an endpoint if you want to add this to the end of your first browsing or you want to put
it as a subdomain.
Right.
The choice is yours and it's different tools that we can use to do that.
I mentioned some of them earlier, like what's faster, you fool is one of them.
Let me show you that one was Masterfoods is a really good tool and maybe we'll install this one.
And maybe I'll show you how to use it, because this is also a really good tool.
Usually I only use this only recommend we don't actually have a burp because burp gives you a lot of
what this tool can do.
And with the turbo intruder burp extension, you can get really, really fast.
And so I don't think basketball is necessary and some people might disagree with that.
But it is a good option.
It is a good tool for.
But that's what we're going to set up in this lecture in the next month, we will set up a class so
I'll see in the next lecture one set up a.
That's right by.