At 3/12/2002 01:41 AM, helmut schmidt wrote:
>Does anyone have opinions on which are the best tools/scripts are
>available to test for the existence of hidden (or non-referenced) web
>directories and web pages.
>
>For example finding a directory http://www.xxx.com/admin
>and hidden web page http://www.xxx.com/admin/admin.asp etc
The whisker tool (v1.4) from Rain Forest Puppy has a fairly extensive list
of directories for which it scans. Download the package from
http://www.wiretrip.net/rfp/p/doc.asp/i2/d21.htm and take a look at the
scan.db file.
Michael Katz
mike_at_procinct.com
Procinct Security
----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/
Received on Mar 15 2002