WebApp Sec mailing list archives

Re: Website "Scanner"


From: Martin Eiszner <martin () websec org>
Date: Fri, 10 Jan 2003 08:23:32 +0100



hola,

On Thu, 09 Jan 2003 13:57:14 +0100
Javier Fernandez-Sanguino <jfernandez () germinus com> wrote:

---*---

the number of requests you are going to make are quite high (and 
increase exponentially). Maybe it would be better to try to first index 
the site (spider like), and then attempt to retrieve "mutated" 
filenames. For example, if you see index.html try: index.html.old, 
index.html.bak...

---*---

you can find a nice and flexible extension-brute-forcer here:

http://www.websec.org/tools/extensions_pl.html 

with a simple config-file here:

http://www.websec.org/tools/extensions.txt

nice day,


MeI






-- 
WebSec.org / Martin Eiszner
Gurkgasse 49/Top14
1140 Vienna
Austria / EUROPE

mei () websec org
http://www.websec.org
tel: 0043 699 121772 37


Current thread: