Several ways to find the background
1. Tool-assisted search
Ming Boy, ah D, some tools under wwwscan,nikto,kali, etc.
And some column catalog tools: Acunetix Web Vulnerability Scanner, JSky, IntelliTamper, Netsparker... Wait
two。 Utilization of website resources
The Robots.txt text of the root directory of the website, the picture path explodes in the background, check whether the copyright information at the bottom of the website is connected, and know it by querying the file name in the website.
3. Search engine query
There was a reprinted article that introduced the use of search engines in detail.
Site:heimian.com intext: administration | backend | login | user name | password | CAPTCHA | system | account | manage | admin | login | system
Site:heimian.com inurl:login | admin | manage | manager | admin_login | login_admin | system
Site:heimian.com intitle: management | backend | Log in |
Site:heimian.com intext: verification code
4. Guess
For example, some time ago, CCTV http://chinvan.cctv.com/ChinvanAdmin/login.aspx saw that there is no such situation. It is the domain name + admin that we often encounter.
Www.heimian.com
Heimianadmin heimian_admin heimianmanage adminheimian and so on, this should be combined with experience to guess again.