WebApp Sec mailing list archives
RE: Website "Scanner"
From: "Zimin, Alex" <alex () towerrecords com>
Date: Wed, 8 Jan 2003 13:02:47 -0800
You can try "Nikto" web server scanner: http://www.cirt.net/code/nikto.shtml Alex. -----Original Message----- From: backed.up.by.2048.bit.encryption () hushmail com [mailto:backed.up.by.2048.bit.encryption () hushmail com] Sent: Wednesday, January 08, 2003 12:54 PM To: webappsec () securityfocus com Cc: vuln-dev () securityfocus com Subject: Website "Scanner" -----BEGIN PGP SIGNED MESSAGE----- Is there anything out there like a port scanner but for websites, where it dictionary attacks the files. For example you plug in the domain: http://www.foo.com and tries to find .html files (or other) http://www.foo.com - index.html ndex.html dex.html ex.html ......etc where runs through numerous possibilities to hit on files on the server (and even) directories). If so, one could certainly hit on some sensitive information, say where the administrator has been testing something, or internal product infos etc. If there is nothing out there like this, why not?
Current thread:
- Website "Scanner" backed . up . by . 2048 . bit . encryption (Jan 08)
- Re: Website "Scanner" Kevin Spett (Jan 08)
- Re: Website "Scanner" Dave Aitel (Jan 08)
- Re: Website "Scanner" sullo (Jan 08)
- Re: Website "Scanner" Javier Fernandez-Sanguino (Jan 09)
- Re: Website "Scanner" Martin Eiszner (Jan 11)
- Re: Website "Scanner" Javier Fernandez-Sanguino (Jan 09)
- RE: Website "Scanner" Nelson Sampaio Araujo Junior (Jan 08)
- Re: Website "Scanner" Chris Reining (Jan 08)
- Re: Website "Scanner" Nicolas Waisman (Jan 11)
- <Possible follow-ups>
- RE: Website "Scanner" Chris Neppes (Jan 08)
- RE: Website "Scanner" Zimin, Alex (Jan 08)
- Re: Website "Scanner" Joris De Donder (Jan 08)
- RE: Website "Scanner" backed . up . by . 2048 . bit . encryption (Jan 08)
- RE: Website "Scanner" glyng (Jan 08)
- Re: Website "Scanner" Kurt Seifried (Jan 08)
- Re: Website "Scanner" sullo (Jan 09)
- RE: Website "Scanner" glyng (Jan 08)
- Re: Website "Scanner" Kevin Spett (Jan 08)
- Re: Website "Scanner" backed . up . by . 2048 . bit . encryption (Jan 08)
- Re: Website "Scanner" Nelson Sampaio Araujo Junior (Jan 09)
- Re: Website "Scanner" Chris Wysopal (Jan 09)
- Re: Website "Scanner" Mary Landesman (Jan 21)
- Re: Website "Scanner" Dave Aitel (Jan 09)
- Re: Website "Scanner" Nelson Sampaio Araujo Junior (Jan 09)