Default Ports: 80 (HTTP), 443 (HTTPS), 8080
HTTP and HTTPS show up on almost every engagement in some form, whether that’s the actual target or just the easiest way in. Because there’s so much ground to cover, HTTP gets its own dedicated section rather than living entirely on this page.
Web Enumeration
The full walkthrough: directory and vhost brute-forcing, CMS fingerprinting, common misconfigurations, authentication attacks, and webshell techniques.