nahamstore

these are the labs used in the udemy course from nahamsec: https://github.com/nahamsec/nahamsec.training these are other resources to check: https://github.com/nahamsec/Resources-for-Beginner-Bug-Bounty-Hunters

THM: [ the nahamstore lab avail on THM] https://tryhackme.com/room/nahamstore#

make sure to install docker.io on Kali:

// installing docker on Kali
kali@kali:~$ sudo apt update
kali@kali:~$
kali@kali:~$ sudo apt install -y docker.io
kali@kali:~$
kali@kali:~$ sudo systemctl enable docker --now
kali@kali:~$
kali@kali:~$ docker
kali@kali:~$

// getting container setup
docker build -t nahamsec .
docker run -d -p 80:80 nahamsec

subDomain enumeration

gobuster dns -d nahamstore.com -w /usr/share/wordlists/Seclists/DNS/shubs-subdomains.txt wget -c https://github.com/danielmiessler/SecLists/raw/master/Discovery/DNS/shubs-subdomains.txt

first clone git clone https://github.com/nahamsec/nahamsec.training.git