Penetration Testing mailing list archives
Re: Website detection
From: pand0ra <pand0ra.usa () gmail com>
Date: Wed, 21 Feb 2007 22:24:02 -0700
You can try BiDiBlah. On 2/20/07, Robin Wood <dninja () gmail com> wrote:
It would be fairly simple to write a script which took a dictionary and used curl or wget to hit the site with each dictionary word appended on the url. Try to add extra words to the dictionary from the company website and company related documentation to allow you to cover company specific words. That is how I'd start. Robin On 2/19/07, 3 shool <3shool () gmail com> wrote: > Hello Everyone, > > We are doing a PT for one of our customers with 5 webservers. None of > these webservers have the website on the main url like > http://xxx.xxx.xxx.xxx but they have confirmed that they have critical > applications running on all the 5 web servers and for security > purposes they have moved the websites to something like > http://xxx.xxx.xxx.xxx/yyy. > > Now manually I guess it will take years to identify the correct URL > having the critical website by using guessing techniques. I was > wondering if there is a tool that could try various popular and brute > force combinations to automatically guess the possible URLs. > > I'm sure many of you would have wonderful ideas to address this > problem. Pls. enlighten. > > THNX > > ------------------------------------------------------------------------ > This List Sponsored by: Cenzic > > Need to secure your web apps? > Cenzic Hailstorm finds vulnerabilities fast. > Click the link to buy it, try it or download Hailstorm for FREE. > > http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW > ------------------------------------------------------------------------ > > ------------------------------------------------------------------------ This List Sponsored by: Cenzic Need to secure your web apps? Cenzic Hailstorm finds vulnerabilities fast. Click the link to buy it, try it or download Hailstorm for FREE. http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW ------------------------------------------------------------------------
------------------------------------------------------------------------ This List Sponsored by: Cenzic Need to secure your web apps? Cenzic Hailstorm finds vulnerabilities fast. Click the link to buy it, try it or download Hailstorm for FREE. http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW ------------------------------------------------------------------------
Current thread:
- Website detection 3 shool (Feb 20)
- RE: Website detection Password Crackers, Inc. (Feb 21)
- Re: Website detection Robin Wood (Feb 21)
- Re: Website detection pand0ra (Feb 23)
- RE: Website detection Paul Melson (Feb 21)
- Re: Website detection Tim (Feb 21)
- Re: Website detection crazy frog crazy frog (Feb 23)
- Message not available
- Re: Website detection Campbell Murray (Feb 21)