WebApp Sec mailing list archives
Re: webapp dependencies
From: Scovetta Labs <security () scovettalabs com>
Date: Thu, 14 Apr 2005 00:07:58 -0400
Don,I'm sure something exists (or could be written easily in Perl) to scan all content for local href links and find unreferenced content. However, you might miss something, all you need is a script that says:
<script> var x = prompt('enter a resource name'); window.location.href='http://server/' + x; </script>...and then the client has control over what resources to access. (Not to mention the countless other ways that resources wouldn't be known until runtime).
The other way to do it would be to go through your web server access logs and determine all of the files that don't appear in it. You'd probably want to go back quite a while.
Hope that helps-- -Mike Jarmon, Don R wrote:
I looking for a tool that will analysis content hosted on a web site, identify all the webapp dependencies, and report on any non-essential content. The tool would run from the server. Does such a tool exist?
-- Michael Scovetta Scovetta Labs www.scovettalabs.com
Current thread:
- webapp dependencies Jarmon, Don R (Apr 13)
- Re: webapp dependencies Scovetta Labs (Apr 13)
- Re: webapp dependencies victor calzado (Apr 14)
- <Possible follow-ups>
- RE: webapp dependencies Ory Segal (Apr 14)
- Re: webapp dependencies moty yacov (Apr 18)
- RE: webapp dependencies Matt Fisher (Apr 20)
- RE: webapp dependencies Amit Klein (AKsecurity) (Apr 20)
- RE: webapp dependencies Ory Segal (Apr 20)
- RE: webapp dependencies Amit Klein (AKsecurity) (Apr 21)
- RE: webapp dependencies Matt Fisher (Apr 20)
- RE: webapp dependencies Ryan C. Barnett (Apr 20)
- RE: webapp dependencies Scovetta, Michael V (Apr 21)
(Thread continues...)
- Re: webapp dependencies Scovetta Labs (Apr 13)